last executing test programs:

3.472028655s ago: executing program 4 (id=4721):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x24040084)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x8}, {0xffff, 0xffff}, {0x2, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000004)
getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x22, 0x0, &(0x7f0000000280))
socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$XFS_IOC_FSGEOMETRY_V1(r7, 0x80705864, &(0x7f0000000300))
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
accept4(r10, &(0x7f0000000440)=@alg, &(0x7f00000004c0)=0x80, 0x40000)
r11 = openat$cgroup_ro(r9, &(0x7f0000000380)='blkio.bfq.time_recursive\x00', 0x0, 0x0)
preadv(r11, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x0, 0x0)
connect$pptp(r11, &(0x7f0000000380)={0x18, 0x2, {0x3, @broadcast}}, 0x1e)
socket$kcm(0x2, 0x3, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={<r12=>0xffffffffffffffff})
r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x24, 0x4, 0x2}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r13}, &(0x7f0000000700), &(0x7f0000000740)=r12}, 0x20)
getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000040), &(0x7f0000000080)=0xc)
sendmsg$NFNL_MSG_ACCT_NEW(r8, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x50, 0x0, 0x7, 0x201, 0x0, 0x0, {0x9, 0x0, 0x4}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xfff}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x44041}, 0x40004)
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla', 0x5)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x20010, 0xffffffffffffffff, 0x5c015000)

2.919408006s ago: executing program 1 (id=4726):
socket(0xa, 0x3, 0x3a) (async)
r0 = socket(0xa, 0x3, 0x3a)
socket(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000c000780080008000000000005000100060000000500050001ffe50005000400000000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x58}}, 0x24000044) (async)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000c000780080008000000000005000100060000000500050001ffe50005000400000000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x58}}, 0x24000044)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000040000000029000000180001801400020076657468315f746f5f687372"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x94)
pipe(&(0x7f00000000c0))
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
setsockopt$inet6_int(r0, 0x29, 0xd1, &(0x7f0000000040)=0x20f, 0x4)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000140)={0x0, 0x1}, 0xc)

2.739899355s ago: executing program 2 (id=4729):
r0 = socket(0x10, 0x3, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x12c, r1, 0x20e, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xf60}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4c36}]}, @TIPC_NLA_NODE={0xdc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xb7, 0x3, "7fcd4487260f69ca5fc6513c0594bf122a761db3075d31635d4b70146a9d8aceb50d70b0d9583a3ab7958342b10e88b927f119dbf4ef436eff42aebbad1e2b8402b0cab060637faa7ac8bd7bb18298e2f016ab93edda6705ec10cabeb810e5eb39be05725ed8f4e2a1d91c86dbe1ab8bd3086435fba3bf1da74dd3d09a6ccfd133aba91245a73b4b8687b91782496e52dae6c884aa642fbee2c109fe4ef30d641373e22e5a979e81438d73c1288ab53305aa99"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_ID={0x15, 0x3, "391f024338f2b80a585c7f7dc5d7749991"}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) (async)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r3=>0x0}) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r5=>0x0})
bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x0, 0xff, 0x6}, 0xfe}, 0x18) (async)
setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmmsg(r4, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x40008c1)
close(r4) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0xfffffffd, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r7, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
bind$unix(r9, &(0x7f0000000340)=@file={0x0, './cgroup.cpu/cgroup.procs/file0\x00'}, 0x2) (async)
r10 = socket(0x10, 0x3, 0x0)
write(r10, &(0x7f0000000080)="240000001a007f0214f9f4070009040802000000000000050002000008000f40fe00000e", 0x24) (async)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x10000, 0x670e, 0x0, 0xffffffff}, 0x0, 0x200000, 0x7, 0x8, 0x0, 0x14, 0x0, 0x1b, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x2, 0x10, 0x1000000}}}}]}, 0x78}}, 0xc090)

2.68074474s ago: executing program 3 (id=4730):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x5, 0xff, 0x20}, 0x50)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f0000000140), 0x10)
r2 = socket$igmp6(0xa, 0x3, 0x2)
sendmsg$inet6(r2, &(0x7f0000000100)={&(0x7f00000022c0)={0xa, 0x2, 0x812, @dev={0xfe, 0x80, '\x00', 0x17}, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="280000000000000029000000040000003c0100000000050200020401"], 0x28}, 0xc0) (async)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
close(0xffffffffffffffff) (async, rerun: 32)
getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) (rerun: 32)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan0\x00', <r4=>0x0})
sendmsg$can_bcm(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x1d, r4}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x0, 0xa85, 0xb61b, {0x77359400}, {0x0, 0x2710}, {0x3, 0x1, 0x1}, 0x1, @can={{0x3, 0x1}, 0x7, 0x5, 0x0, 0x0, "d6a72299ae26889b"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000805}, 0x4000800) (async)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x10010, r3, 0xa6220000) (async)
sendmsg$can_bcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="0500"], 0x48}}, 0x0) (async, rerun: 64)
socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000fba1ffffb7030000feffffffb70400000000000085000000820000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0xc, 0xff9, &(0x7f0000002300)=""/4089}, 0x90)

2.341053171s ago: executing program 4 (id=4733):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000240)={@multicast2, @empty}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001e40)={0x1824, 0x37, 0x109, 0x70bd28, 0x25dfdbfd, {0x2}, [@nested={0x180e, 0x5e, 0x0, 0x1, [@nested={0x108, 0x128, 0x0, 0x1, [@nested={0x4, 0xec}, @generic="61ee86e6a940faac262b3c7ee2ac77366753c8fdd80ab5416a0a0bd8457f772e", @typed={0x8, 0xbb, 0x0, 0x0, @u32=0xfffffffb}, @typed={0xd8, 0x153, 0x0, 0x0, @binary="a04e1d264159460cb9126d844f11aebd29e8249fe9b8bdf5a24e807c2dcb0ce0f2ec54e30eabba85d8494d87ee84c67d4bfaea10c9556960dbfff08dd834c245fdc8c4e488517edeb7f2d59d189594433b1b6091508b5ae0db08088deb15eb53352d926487e25e7a4b2a8513ac682201065b58693f19a619b3b4e6736c62cc763a17627a5132b0d8aa39fa6cc1171a9d5d136dc58f800094af34fb9322df1299c046c2f61078af1dbc14ad7bc9f0871acb3c81a18c9ec616608b36dfe98831842a4fef02e53b25608f0e8807e3cad0f373a05f35"}]}, @nested={0x1038, 0x311, 0x0, 0x1, [@typed={0x8, 0x10d, 0x0, 0x0, @uid=0xffffffffffffffff}, @typed={0xc, 0x66, 0x0, 0x0, @u64=0x200}, @typed={0x8, 0xa9, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @nested={0x4, 0xbe}, @typed={0xc, 0x127, 0x0, 0x0, @u64=0xfffffffffffffffb}, @generic="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", @nested={0x4, 0x50}, @nested={0x4, 0x12}]}, @nested={0x1fa, 0xea, 0x0, 0x1, [@generic="eb3c2883bbec8a4d3aa4ee85c37318902573cdbaed474e3f6c169b7ce08b024d7a93e762982d96a81d810dfeeed302ecd6315949d4a7e7dbc788e635e05ab7c46240354a3a50977322046def23bb1daa341a6be4367cc737eaf09f64672dcf58c465a9ffb5dcb6da1acddc8a06357b1df8d7ac41cd95bfb9db694307b1aecf9d5242db0bf67e037fafe6413a", @typed={0xc1, 0x7, 0x0, 0x0, @str='f\xecr\x00t\xffr\xdb\x9ee\xebpn\xfby\'i3`A\x8dh\xc6\xad\xf1\xe2Q\xc8\'\x11\x8c\x83\bD\x04\xf5\xbb\b\xff\xf5Z\xbd\xce\x1b\x92T\xcc\"U\xb4\xf3\x14d/\xe7\xa0\xaf_e^\xb5D\xfe\xf8\xa8\xad\"\xb3\xcc?\xe5\x12x\x84\x85.R\xaes\x83\x1f\xf6Y\xb9=\xfc\xd9\x00\xff\x8f\x19\xcc\x8d\xe7W\xd0*\"\x9a\t\xa9\x9e\xfd\x15\xaf\x1e^\xc8?3U\x19\x87\x06\x8c\xf2\xca\xc3k!3o\x04\xa2\xca/\xf1{\xde\x1e?8\xe6~\xe8\xb5\x1c?.\xf0e\xf7\x11\xc9\xca\xde\xf2\x8bx\xc3\x1a\xd0OH\'\xf7a\xa9~.\xc2#\xaa\v\xbf\xc7MU\x9a\x87\xe3H~t\fl\xd2\x87UP\xf2zi%,\x81\x80\x9c\xfd'}, @generic="85624ad3b59d7d5cb4a7838de160a63ec64d10fc831b4f397e4bb87355e0f1c89483b6d77cb70e348567cc44df9f24033e71cb1a695df385d23df31832847e18f30b7b977f3965", @nested={0x4, 0xc1}, @typed={0x8, 0x17, 0x0, 0x0, @pid}, @typed={0xd, 0x8a, 0x0, 0x0, @str='nl802154\x00'}, @typed={0x8, 0x115, 0x0, 0x0, @ipv4=@loopback}, @generic="569f12b43470367374aec72171569ccb2ece29e9e9c3062e81058bc5ffb924aa84c536924b8d9e0d98d9415d7ae9c24b54cbe68645157b", @typed={0x4, 0x66}]}, @nested={0x2de, 0x80, 0x0, 0x1, [@typed={0x8, 0x122, 0x0, 0x0, @u32=0x1}, @generic="f1b1d46c77f462bf79cc04cb49fc39507ce9e5218b9c3e3c24781c75688e098ff4afa8f3dcc0663eaf99691434456d2fcf95128826402fe699a85b7aaba51f4e69343ff9a89e6ff4ef5d28f96f0ff01177", @nested={0x4, 0xec}, @generic="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", @nested={0x4, 0x14f}, @nested={0x4, 0x14d}, @generic="5b5a6ae94d9536b8b9738cebe96631a77daceded83db1f89ee07a512f91abcddd033525e472339dc5e667e358e030a6d904cb64f5d84837323049a2d7d137952f117bb53bad96f87a56135087611ce2cc38776bf47109f59fa380f2f74ac7371e44b13ffe0eb8573f4313405f5cac84dc525fa8f960b32e68d74c7542e4f0329a4780494a6fa5a3bff2237e9282e4014", @typed={0x8, 0x93, 0x0, 0x0, @ipv4=@multicast2}, @generic="a161e5067ac4fff9ab5b711aa99df4337372ae121bf8f951db814c1583ec0e8e6cde8652", @generic="ae844b0542505f5b7c057c53dad6574e430995312dabfd6d48dfa82bd7ee9fa5c36996ab666e7517873f51e71cbaa9a1e85f0daecdad1a826650e7bce562177d9858f4be3b6ed0656d1cc1a998e6ff4aedfee1bbbb7f78bacebedbd4872c369a359426f37b2d5ab5866fa2474ea44b324c6e5790ad717a81e4020483118306e93f20f00d0191111f1657d76f2acb531cc6804e171ecf55fbcff797fcfddf36117c565aad354348215c764e56999946ad805ea6ceb26fd641c621694c8e"]}, @generic="5a931ace1f7fab532e0e31dbc52017056e22203ed0a2143308a2981074cdde985e4e412b4036643578756fd6e955afaac19eb34c0a726b528ccf3d4f9238dddca3b984ef0f73105ea57057f20746cf8b07eebb25cdf4cef9f80b", @nested={0x18b, 0x33, 0x0, 0x1, [@typed={0x8, 0x130, 0x0, 0x0, @pid}, @nested={0x4, 0xd8}, @typed={0x8, 0xc3, 0x0, 0x0, @pid}, @nested={0x4, 0x6e}, @generic="968a1999c68f09e395273da4a5ad1290ec2443ae07aabf1bc50e4c2e2b64c2ee7f19b3d0d46e67b03573216d7a8141240561840c90526c387d5076d3a7bde51bd81d692519216854c8f2201954afd59579d275a414ff9434d1bcdc678d7d71c6d012ff3a48106dd76d0c6cbf363afe0d087db8802656207c80f04d015818d37b1941f20aaddc0e0c0bc1b30f8b49631563fae3cb1b8ab49f8c670112306cfae9970223dc06ff310af2bcad948778a405a0ca93f12a7eb8b3352ecfc76a5c49d85d87ac49", @generic="ff61279049bc6adc59512736d35e8266416e", @nested={0x4, 0x7c}, @generic="c52c0d15598dc8df90b27e1220a75096974c28c82ca21f05d98e893c2ada0a04ac710b720e28b7f60a459283916d480fb79eb93f15e48122a8a788f6f7243ac505c2126b9042a64c3ec16992018249d7fc3f5a391d6f687f2b82170daa28d95b9a7f01756d3f4bd6eb1cf9f015d15a4f536e61078a435054e21086d9a0fcaeaaa8632ac158670e62a9c73499b98975ad46991c6159"]}, @typed={0x8, 0xd9, 0x0, 0x0, @uid}]}]}, 0x1824}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x68, r4, 0x1, 0x270bd2b, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x4, @link='syz1\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)
setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4)
r5 = socket$netlink(0x10, 0x3, 0x15)
writev(r5, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
recvmmsg(r5, &(0x7f0000007600)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x2000, 0x0)
listen(r2, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_CHANNEL(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c00d300", @ANYRES16=r7, @ANYBLOB="010009000000fcdbdf2509000000050008000a00000005000700160000000500080003000000"], 0x2c}}, 0xc0)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0)
r9 = accept4(r8, 0x0, 0x0, 0x0)
ioctl$XFS_IOC_DIOINFO(r0, 0x800c581e, &(0x7f0000000140))
syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r9)
sendmsg$alg(r9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x840}, 0x4040880)
sendmsg$nl_route_sched(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001dc0)=@newchain={0x80, 0x64, 0xf09d2fbf8b68c555, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x8}, {0xfff1, 0xd}, {0x9, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0x7, 0xa}}]}}, @filter_kind_options=@f_flower={{0xb}, {0x38, 0x2, [@TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @loopback}, @TCA_FLOWER_KEY_ETH_DST_MASK={0xa, 0x5, [0xff, 0x0, 0xff]}, @TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0xffffffff, 0x0, 0xffffff00, 0xffffff00]}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x44000)
setsockopt$bt_BT_DEFER_SETUP(r9, 0x112, 0x7, &(0x7f0000000100), 0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)

2.316690559s ago: executing program 2 (id=4734):
r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, r0, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x6, @link='syz1\x00'}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x40)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x60, 0x30, 0x871a15abc695f839, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x5, 0x3003, 0x3, 0x4009, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x60}}, 0x0)
r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
connect$llc(r1, &(0x7f0000000240)={0x1a, 0x207, 0x7, 0x6c, 0x3, 0x0, @remote}, 0x10)
r2 = socket$kcm(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0)

2.239978203s ago: executing program 3 (id=4735):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket(0x2d, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x2d, 0x0, 0x0, 0x2}, 0x3, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYRES8=r0, @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000000)={0x1000, 0xaf43, 0x7, 0x40, 0x1})
r8 = socket(0x1, 0x803, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0x4}, @IFLA_BOND_MODE={0x5, 0x1, 0x2}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040)
r11 = socket(0x11, 0xa, 0x0)
sendto$x25(r11, 0x0, 0x0, 0x85, &(0x7f0000000f80)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12)
sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0)

2.144756009s ago: executing program 1 (id=4736):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r2=>0x0})
r3 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0)
sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0)
sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x28, r1, 0x1, 0x2, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@key_params=[@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "1bdbcfb9f8"}]]}, 0x28}, 0x1, 0x0, 0x0, 0x44011}, 0x0)

2.103584477s ago: executing program 0 (id=4737):
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x144, r1, 0x400, 0x70bd25, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x9}, {0xc, 0x90, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0x43a}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0xe9}, {0xc, 0x90, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x8dd}, {0xc, 0x90, 0x5e6}}]}, 0x144}, 0x1, 0x0, 0x0, 0x40}, 0x4c404)
socket(0x10, 0x3, 0x0) (async)
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24048082}, 0x2000400c)

2.009817077s ago: executing program 1 (id=4738):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000081000400000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52}, 0x37)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000003700)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000001340)="ec3d788a47e83bd160b8ac738a70c71c3374c77c0fa13efcb33d8d3935b120aaf287d6286e491141a63ef97905e5184382e568f8dbb6693047e25fb50a08e563df1c598b872e95bf3a986b66daab6c167e70762d5ade17bef91a2e7960fe6d75361f88e1feaf471bd5a95e88b6555e1738c1d59373334afcea7ffc0d8d12b93ce4de82b8c77c4f6810093c1cdc16edaae94ef46ca3768cce1a8a9101bad6f157f7d1b2e27004aa9cda743d69db42a293d0f66b533cf42508e663fa14706af4bb230ff60ecee0b5785871dfc9b7d565dcf17504e32575e0e4148bc825564f9ac41d18aea0efb43d5999b7f7fde614686532692d469a05263b9389d115f06c0a0785a02fdaf30c0f21e58639ad2bf658b5a985bfa11cff87e5f8d4323ceae815dc8f00d2e207d7f37c1ee0c05bc2c531ad6e522609308600b0b72a786f6bf22deb88067406b48b0e79587e9077d4f2608f6d0eb131cc08d138e914177fa9676c53c28f388dc3bc88aa9c3d74674cdc343d53ec2b46edf8d0d1c8a8722e97c56d99b998d8e0d7da1ceb5ac240bb4f6d16c651fb92c9e9faf4c269bc07ab89f83500a492786d85ba35f6ee01d0d75270075aa266ab158a6d41b1cd3f4e54b8b5432b36a40b097b2a0d05824e6f1834ae20d3832484f39db39878af737cec27d63783f047cc0f60aa50eef300a4adb18966f9ecb1d14b17ef4ede259a9ac740b4015e", 0x200}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x20044881)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)
ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000140)=0x8)
r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1)
sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000004006c000500e3ffffffffff07000700ac1414aa08000800ac1434000800020005"], 0x54}}, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x31, 0x200, 0x70bd25, 0x25dfdbfc, {0x13}, [@typed={0x8, 0x103, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r4, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x4048000}, 0x4000)

1.868786594s ago: executing program 2 (id=4739):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x140, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20000c40)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xc, 0xe}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x3}, @TCA_FLOW_KEYS={0x8, 0x1, 0x13aac}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40056}, 0x8080)
r7 = socket(0x10, 0x803, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x4)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r9=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x40000, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x10061}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
r10 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000080)=@ethtool_rxfh={0x1}})
r11 = socket(0x2, 0x80805, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r11)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f0000000000)={'wlan1\x00', &(0x7f0000000f40)=@ethtool_stats})
r13 = socket$nl_crypto(0x10, 0x3, 0x15)
getsockopt$IP_VS_SO_GET_DAEMON(r13, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30)
ioctl$sock_inet_SIOCSIFDSTADDR(r11, 0x8918, &(0x7f0000000340)={'wg2\x00', {0x2, 0x4e24, @empty}})

1.777951181s ago: executing program 1 (id=4740):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014)
sendto$packet(0xffffffffffffffff, &(0x7f0000000240)="fffffaff4cfce911406bfbc851c5808d9db098a90a9d866e57778ff7a6aa6e13237a1812bef048445ff3287a060cd55c0b039565dc1d39a6bba485dde67f2cfce5347ac55bd471d94b3ed20e663c36ad", 0x50, 0x0, 0x0, 0x0)
r1 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r1, &(0x7f00000001c0)={0x0, 0x5, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0)
sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="e4b6791074dacb8042eb333823001a", @ANYRES32=0x0, @ANYBLOB="010000000000000000000200000008000300", @ANYRES16, @ANYRES32=r0], 0x28}}, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$sock_int(r2, 0x1, 0xb, &(0x7f0000000200)=0xfffffffc, 0x4)
sendmsg$inet(r0, &(0x7f00000024c0)={&(0x7f0000000000)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10, 0x0}, 0x24040000)

1.708141749s ago: executing program 0 (id=4741):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000040)=0x1, 0x4)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x16, 0x300, 0xfc, 0x0, 0x0, 0x2}, 0x1c)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r2)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000100)={'wpan0\x00', <r5=>0x0})
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, r4, 0x411, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
r6 = socket$packet(0x11, 0x3, 0x300)
r7 = socket(0x10, 0x803, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r8 = socket$inet(0x2, 0x2, 0x1)
setsockopt$inet_opts(r8, 0x0, 0x4, 0x0, 0x0)
sendmsg$inet(r8, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000400)="08001efbb07d586e", 0x8}], 0x1}, 0x0)
r9 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000005e0001"], 0x20}}, 0x0)
sendmsg$SMC_PNETID_GET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x48, 0x10, 0x437, 0x3, 0x3, {0x0, 0x0, 0x0, r10, 0x51b0b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="b405000000000013510000000000000023012c002d39f00b9500000000000000f30f347e77798fa6b25a5e0d28a6fe48d0a49302c15f7cef0f2478ca06bc344ab2894e4c75f4efaf69d12d42177ce6b0ac24b00581105b883c46578541707d66fbc24ead"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0xd, '\x00', 0x0, @sk_skb}, 0x48)
setsockopt$netlink_NETLINK_CAP_ACK(r9, 0x10e, 0xa, &(0x7f0000000240)=0x14, 0x4)
sendmsg$NL80211_CMD_SET_BEACON(r7, &(0x7f0000001100)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000010c0)={&(0x7f0000000640)={0x9f8, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x211, 0x80, [@ht={0x2d, 0x1a, {0x800, 0x0, 0x4, 0x0, {0x7, 0x6, 0x0, 0x8, 0x0, 0x0, 0x1, 0x2, 0x1}, 0x400, 0x3ff, 0x2}}, @perr={0x84, 0x115, {0xd3, 0x11, [{{0x0, 0x1}, @broadcast, 0x80000000, @value=@device_b, 0x2}, {{0x0, 0x1}, @device_a, 0x401, @value=@broadcast, 0xc}, {{}, @device_b, 0x70f}, {{}, @device_a, 0x6, @void, 0x3d}, {{}, @device_a, 0x8001, @void, 0x9}, {{}, @broadcast, 0x7, @void, 0x1}, {{0x0, 0x1}, @device_b, 0x10, @value, 0x40}, {{0x0, 0x1}, @device_a, 0xf5, @value=@broadcast, 0x1}, {{0x0, 0x1}, @device_b, 0x0, @value=@broadcast, 0x2}, {{}, @device_b, 0x6, @void, 0x2e}, {{}, @broadcast, 0x6, @void, 0x2d}, {{0x0, 0x1}, @device_a, 0x7, @value=@broadcast, 0x1b}, {{0x0, 0x1}, @device_b, 0x401, @value=@broadcast, 0x7}, {{0x0, 0x1}, @broadcast, 0x4, @value, 0x15}, {{}, @broadcast, 0x98, @void, 0x30}, {{0x0, 0x1}, @broadcast, 0x8, @value=@broadcast, 0x1c}, {{}, @broadcast, 0x2, @void, 0x39}]}}, @channel_switch={0x25, 0x3, {0x0, 0x70, 0x3}}, @erp={0x2a, 0x1, {0x1, 0x1}}, @fast_bss_trans={0x37, 0xca, {0x7, 0x7, "48f81290cb28d229d20248057127e843", "a3e86432afb6dd200b09996583ef217a653d2bbd6b9272e0b933c4a74fc8f3b1", "37bf666e20a909b575a657c205aca9cce2a06ddf5dd4f61fb193bf481705d92e", [{0x3, 0x3, "03a044"}, {0x3, 0x1f, "e04320971acb81441b184f0957ea277b9e27f73348f12b22c95a393e1f06a8"}, {0x1}, {0x1, 0xc, "08e9c86bd09711199da1476c"}, {0x2, 0xe, "cb9b4d2ff5baf8c403eb069fb90a"}, {0x1, 0x19, "73703a56cd058892dc6a5f8f5532d7925a3785937fda6c13f6"}, {0x2, 0x15, "c3f2cfc7a544278027053c033ace7e089f40fd7be3"}]}}, @challenge={0x10, 0x1, 0x97}, @sec_chan_ofs={0x3e, 0x1, 0x2}]}, @NL80211_ATTR_BEACON_TAIL={0x2c6, 0xf, [@mic={0x8c, 0x18, {0x36a, "ed2244e4f100", @long="b52affef2d3b80b1607685632fc3b7ae"}}, @measure_req={0x26, 0x3d, {0x7, 0x0, 0x6, "8dc76b80bc7ef9b04b349a13371f88e09be6e5db812242ae2b6ca587a2f4769ca70bf34b0519d42e55e3d205107753b151a3bd48b32ebfc46c96"}}, @random={0x76, 0xc5, "4d46a1a1a50f434c19a34aa24d4610cd1a637e9514ef742ab5e1f4511405709c79e1ff97febbbe8eeefed30b0a743811dc033cd736309c66c9208d11d24265a2c8c0d42c3c806899110890e02296a1cff28890226295344db0819ad3a05889ddf251f469c2bde9a598849e05676d820a8a23b13c276c6975d9c193715c69263cef8e972152e2cf7f830aba71f67988181c6d715703e20b21fc3f9723544745e4b750e9af8ed383959dec46e1dcf75e30d1447040e54014d3f0b096e584c565ec7f9cda7c45"}, @dsss={0x3, 0x1, 0x24}, @perr={0x84, 0x12e, {0x3, 0x12, [{{}, @device_b, 0x1, @void, 0x1f}, {{0x0, 0x1}, @device_b, 0x323, @value, 0x40}, {{0x0, 0x1}, @device_b, 0xffffffff, @value=@broadcast, 0x34}, {{0x0, 0x1}, @broadcast, 0x0, @value, 0x2d}, {{}, @device_b, 0x9, @void, 0xc}, {{0x0, 0x1}, @device_a, 0x1, @value, 0x1a}, {{0x0, 0x1}, @device_b, 0x7b, @value=@device_b, 0x3e}, {{0x0, 0x1}, @broadcast, 0x3, @value, 0x3c}, {{}, @device_a, 0x400, @void, 0x6}, {{0x0, 0x1}, @broadcast, 0x4, @value=@device_b, 0x15}, {{0x0, 0x1}, @broadcast, 0x4, @value, 0x11}, {{0x0, 0x1}, @broadcast, 0xc39, @value, 0x9}, {{}, @broadcast, 0x8, @void, 0x23}, {{0x0, 0x1}, @broadcast, 0x7, @value=@broadcast, 0x1c}, {{}, @device_a, 0x7fff, @void, 0x29}, {{}, @device_b, 0xffffff07, @void, 0x29}, {{}, @device_a, 0x42ad, @void, 0x27}, {{0x0, 0x1}, @broadcast, 0x5, @value=@broadcast, 0x3b}]}}, @random_vendor={0xdd, 0x6d, "4d6e715b6670ee1444ba625de886794d15b18bc197875e760b1ef088e17050456bf5b56557ce96f62083c1286f89253cf261ea2d0dd4634594bcabb27403bbce0dc49f218f9042cf4a148e38952ee01f6e9ddde44222a09c4b0a7f67af0d697cf627f1f894af9fe5c4ddaf094b"}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x7e, 0x80, [@fast_bss_trans={0x37, 0x78, {0x5, 0x1, "9a75900913e309f38b180d0b584c819e", "4efded139e5e5dbe2725e7f255736f889e4e8edb1e646798f5e75f47aeba7755", "2634ec03ae981c1034e0159f4cbe30d60230b9b171029a79a7d701c9f6a17a9e", [{0x2, 0x24, "9dcc04d9c495a110ccb5ab63a7b361aa16c3844bdf862fcd6b00e7033e0187d2841fd517"}]}}]}, @NL80211_ATTR_BEACON_TAIL={0x17, 0xf, [@mesh_id={0x72, 0x6}, @cf={0x4, 0x6, {0x5, 0x4, 0x6, 0x4}}, @challenge={0x10, 0x1, 0x1d}]}, @NL80211_ATTR_BEACON_HEAD={0x46f, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x1}, @broadcast, @broadcast, @random="6ae0126ea0dd", {0xe, 0x2}, @value=@ver_80211n={0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1}}, 0x4, @random=0x3, 0xe00, @void, @val={0x1, 0x4, [{0x6, 0x1}, {0xc}, {0x3, 0x1}, {0x18}]}, @val={0x3, 0x1, 0x3c}, @val={0x4, 0x6, {0x7f, 0xb, 0x2, 0x5}}, @void, @val={0x5, 0xd2, {0x6, 0xa5, 0x0, "d52bf8b5f358da304f80d45b24f69a2e0382e6ee88e4a241bad3a7dab3ba7b6e43f25fa75e55b5b1870c6919397c0f77cc5210baa256bc73280913cc8be47e92893aee8daa5b22d0c52eeb37a61907eda2b15089132c6e8be27145827d0ebcd7a56189cda2763ddc8b171b150e9d6ddab520df53f8acef54a53f79c70fc870f31316b6cfda805fb9ba99d1f061ee4c7c297e49df30381bae210b1b09edab18c94c454aacba9b367168815ced66b4fe04efd17fad2d3e55c557730f2505e5ccaf86399ccb2be1da1179a3629ee782fa"}}, @void, @void, @void, @val={0x2d, 0x1a, {0xc, 0x1, 0x0, 0x0, {0xfffffffffffffffd, 0x8, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1}, 0xc0d, 0x3, 0x6}}, @void, @void, @void, [{0xdd, 0x82, "036f29ddc3b34060b0fc7b7aeb2dcad736d11374c744a38d143843fa3d890652332499bbd065d50c93b05f2be0b2593ee881d7803d495c42a35ee8721635304a299e87a1db9f60ee249da72020c65636ad7726295f4eded2af29cc31d4abe75ad70448c14ac853c114ef6624fede90b5c2a4a71bad43b287085944a185ee64e46fba"}, {0xdd, 0x9a, "b211b413f2edf0210f9a75c561eaa3996d220b510fd6f3e829e647d345f28b11027cf35012562eeb53e4541903af3b59a82d313751573af1090096aa89bd59653bd2ee16802326c0538a69db9a3ae5d625f1fbf89907811b63b491dee5d2c1b4fb3331182c81f61c431d8ee71b41343c0dd8ff40004ed33b29ea28cfcdfa0f6507d4eaa5ce65ef5bcfff0b82c5dd39a14f22d86717cae357fc0e"}, {0xdd, 0x85, "4dfce4ba3cc929ea633cb030e1e08282a56e16f55b6f3b9733451a6897fc7fa2547f5af104d7b1e7504719758ae6fcb0aaf0bb141b7066f0efb8dac31c12aad58039f6ea325d653964babe7f060a2a9c3234f8f0e25aafb7a0b6ad120aff41a515ec9e2a526e5eadbbce6e2865a1c0fad1f48b2f507e8fc812cd4319bb8ac96aa0636aa836"}, {0xdd, 0xf9, "268dc3c2aa45018ddec47c73f0c9707a909f0e1b8c00033b0eca45465345fb8396a2e7aba43708120b1947ccf0d1f30651a2d4ee92df2f320d4a0adc0bbeab7ed2a34d46448fa3578934609b7d2dae56fbe1792599fea992d454fa2fba7c932cafc7bc50f3d4fa8c11ebd80593da5db5569aa7c17b95c067d310c0d7ef90177f4be0798214c5181cddd3f938b6287bddcd9b8eb1a4d93ed2e975405f2df068c659dd51f0e3d0122fe4c675c37fddb787c2388e211b8e55258d6da4fc74cc6ce16bdae5a59a53e4bd4a477d9a784795a833a143c5d2392ec458039acefd750b0ee381690650f38018255336fa6cf5cc4720d2049f728e40489c"}, {0xdd, 0x9e, "1e741b36e93393994f6901f094ffb2497be6bccb97fb38aa1c814a494e288ccf3405b8d69e8f7d9ed14fa5aa56bb0ef7ce5b9f3f251c914c9013f2e2882ccc588003c3e0f672b26e63574019d6a7b82ce75dcd8171bbcd338e18d495e29a37dd8ecd400485e7355e79b30159ce2dfc2861f1ceeb67a0d0bde79d5db8e57627aaf3aa5b81dc17ee312b562ffb4ca936b2d2e7291e0166432e14f3abeade91"}]}}]}, 0x9f8}, 0x1, 0x0, 0x0, 0x40000}, 0x40)
sendto$packet(r6, &(0x7f0000000580)='o', 0x1, 0x4, &(0x7f0000000180)={0x11, 0x8100, r10, 0x1, 0xe9, 0x6, @local}, 0x14)

1.706675681s ago: executing program 3 (id=4742):
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000005290d58d75db47e300fdff050a010400000000000000000a0000010900010073797a31000000002c0004802800018007000100637400001c000280050003000100000908000140000000090900020073797a32d38fdee6c1afdb5ffc750c0f4c00"/128], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r2, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r4=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x70bd28, 0x100, {0x0, 0x0, 0x0, 0x0, 0x8603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004)
sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f00000005c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0)
sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, 0x0, 0x11)
socket$netlink(0x10, 0x3, 0xc) (async)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000005290d58d75db47e300fdff050a010400000000000000000a0000010900010073797a31000000002c0004802800018007000100637400001c000280050003000100000908000140000000090900020073797a32d38fdee6c1afdb5ffc750c0f4c00"/128], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) (async)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
bind$inet6(r2, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)) (async)
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x70bd28, 0x100, {0x0, 0x0, 0x0, 0x0, 0x8603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) (async)
sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async)
socket$alg(0x26, 0x5, 0x0) (async)
bind$alg(r6, &(0x7f00000005c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) (async)
sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, 0x0, 0x11) (async)

1.284658082s ago: executing program 4 (id=4743):
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1805000023000000000000000000000018410000fdffffff000000000000700095000000000000006524ccffca5e323b3d0aebb52bd65c90f30fe44aa3c2a7d71a5d4745263d8140fc8e1474a0cc4faa1eaec8b4cfd0d89c5ee9d8801de8fb450a0f71db9218e72fc210f4904f9794afc520298d02a09dd91c20cb35b406d08c469a0e9981ad249052c2414bba6e982641c6fe9e8c57702db8d4b275a7358e729b2d5c86c8"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.275974491s ago: executing program 0 (id=4744):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async)
sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x4}], 0x18, 0x810}, 0x4000000)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="d8000000180081084e81f783db4cb9040a07080006007c09e8fc55a10a0015000600142603600e120800020081000401a8000100fcc0ffff000000fd035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) (async)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newsa={0x14c, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x200000000006, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc, 0x101}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @srcaddr={0x14, 0xd, @in6=@ipv4={'\x00', '\xff\xff', @empty}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x8801}, 0x10) (async)
r3 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @private=0xa010100}, 0x10) (async)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@empty, 0x8000, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0xfffffffffffffffc}}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) (async)
sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0xf000, &(0x7f0000000080)={&(0x7f0000000340)=@flushpolicy={0x1c, 0x1d, 0x1, 0x0, 0x10000000, "", [@policy_type={0xa, 0x10, {0x1}}]}, 0x1c}}, 0x0) (async, rerun: 32)
listen(r3, 0x8) (rerun: 32)
r5 = accept4(r3, 0x0, 0x0, 0x0)
setsockopt(r5, 0x84, 0x82, &(0x7f0000000480)="1a00000002000000", 0x8) (async, rerun: 64)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000206010100000004000000000000000005000100070000000c000300686173683a69708d0c0007800500140000000000090002f4258d9d300000000001000500010000000500040000000000ba3679f1dae4ed5142"], 0x50}}, 0x0)

1.213391041s ago: executing program 3 (id=4745):
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000000)=0x1)
syz_init_net_socket$llc(0x1a, 0x0, 0x0) (async)
close(0xffffffffffffffff) (async)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000000)=0x1) (async)

1.074720198s ago: executing program 4 (id=4746):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000080))
r1 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r1, 0x84, 0x25, &(0x7f0000000000), 0x20000010)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'\x00', 0x5})
ioctl$TUNSETPERSIST(r3, 0x400454c9, 0x1)
ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x0)
ioctl$OCFS2_IOC_GROUP_ADD64(r3, 0x40186f03, &(0x7f00000000c0)={0x8, 0x1, 0xe, 0x4})
r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r2)
sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000340)={0x1c8, r4, 0x1, 0x70bd28, 0x25dfdc00, {}, [@NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_TAGLST={0x4c, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x15c, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xde29b9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x54b5a6b7}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xeac5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6ec0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x73af}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x35abdd14}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x53dd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4ca61dcb}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4df6b682}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcaf2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x76c0b908}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4e4d76da}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x135dcd38}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3ff}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x41c4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1a94}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x23583b8c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4298}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6d5504e2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4a1d837e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5da8052a}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x39e31533}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x112a3cb2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf6a9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfc48}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5eb98b68}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6d4c9ec9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7f1d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x22ef}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd5f9}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1b04}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xde37}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3e49}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7dd6f22a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe252}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x27c6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe8af}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd794}]}, {0x4}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x48050}, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) (async)
ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000080)) (async)
socket$kcm(0x2, 0x1, 0x84) (async)
setsockopt$sock_attach_bpf(r1, 0x84, 0x25, &(0x7f0000000000), 0x20000010) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'\x00', 0x5}) (async)
ioctl$TUNSETPERSIST(r3, 0x400454c9, 0x1) (async)
ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x0) (async)
ioctl$OCFS2_IOC_GROUP_ADD64(r3, 0x40186f03, &(0x7f00000000c0)={0x8, 0x1, 0xe, 0x4}) (async)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r2) (async)
sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000340)={0x1c8, r4, 0x1, 0x70bd28, 0x25dfdc00, {}, [@NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_TAGLST={0x4c, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x15c, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xde29b9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x54b5a6b7}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xeac5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6ec0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x73af}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x35abdd14}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x53dd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4ca61dcb}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4df6b682}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcaf2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x76c0b908}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4e4d76da}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x135dcd38}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3ff}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x41c4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1a94}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x23583b8c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4298}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6d5504e2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4a1d837e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5da8052a}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x39e31533}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x112a3cb2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf6a9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfc48}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5eb98b68}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6d4c9ec9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7f1d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x22ef}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd5f9}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1b04}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xde37}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3e49}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7dd6f22a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe252}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x27c6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe8af}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd794}]}, {0x4}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x48050}, 0x0) (async)

1.074224481s ago: executing program 2 (id=4747):
socket$netlink(0x10, 0x3, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0)
socket$xdp(0x2c, 0x3, 0x0) (async)
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000340)=0x800, 0x4) (async)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000340)=0x800, 0x4)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
unshare(0x20000400)
socket$inet6(0xa, 0x2, 0x0) (async)
r3 = socket$inet6(0xa, 0x2, 0x0)
getsockopt$inet6_mreq(r3, 0x29, 0x12, 0x0, &(0x7f0000000240))
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000001300)=@ethtool_pauseparam={0x13, 0xf1d, 0x8, 0x1}}) (async)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000001300)=@ethtool_pauseparam={0x13, 0xf1d, 0x8, 0x1}})
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r0, &(0x7f00000003c0), 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x20040000)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$6lowpan_control(r5, 0x0, 0x3)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1a, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c00000000c07188890000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x194}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1a, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c00000000c07188890000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x194}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000004c0)=ANY=[@ANYRES8=r2, @ANYRES32, @ANYRESDEC=r1], 0x68}}, 0x20004001)
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000240)={0x0, 'syzkaller1\x00', {0x3}})
write$tun(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) (async)
write$tun(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'syztnl0\x00', &(0x7f00000000c0)={'gre0\x00', 0x0, 0x80, 0x20, 0x5, 0x7, {{0x1f, 0x4, 0x3, 0x12, 0x7c, 0x68, 0x0, 0x2, 0x29, 0x0, @broadcast, @private=0xa010100, {[@ssrr={0x89, 0x2b, 0x15, [@remote, @broadcast, @multicast2, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x32}, @multicast1, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote]}, @rr={0x7, 0x27, 0x12, [@empty, @local, @broadcast, @remote, @rand_addr=0x64010102, @private=0xa010100, @loopback, @loopback, @local]}, @timestamp_prespec={0x44, 0xc, 0xb9, 0x3, 0xb, [{@local, 0x4}]}, @lsrr={0x83, 0x7, 0x84, [@rand_addr=0x64010100]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x29, 0x7, 0x8, 0x8000, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @local}, 0x1, 0x40, 0x3, 0x43}})
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x4)
r7 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0xffffffffffffffe1, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0x0, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70ad25, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x10, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054)

1.036908632s ago: executing program 3 (id=4748):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000480), &(0x7f0000000500)=0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000043c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000c80)=r4, 0x4)
sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000f80)="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", 0xfdef}], 0x1}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r7, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000040)=@ethtool_wolinfo={0x5, 0x0, 0x2, "0a08cf30c194"}})
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000440)={'team_slave_0\x00'})
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b04000000000000000002000000288bbfcdc35c567a31708dc36209d27a00048024000180090001006d6574610000000014000280080001400000000008000240000000070920010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a297fc75e4f55a5c44afe0f2fe48fd7b1bc9633ff19b66b13de81a6ddd5e8a3479614566f4843597c078c437701b65fc3de8a7c61f84b80ee5846410228ffa5e5cdcc60ae6a85e30ce451fa6e1888c0c5efe5a29eb688c3e05f247a44ec3e50f477c7c7d16a51624306b3bb9e"], 0x7c}}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r10, 0xd1bd17c4b9ef5e5b, 0x70bd26, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}]}, 0x1c}}, 0x90)
ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f00000006c0))
sendmsg$nl_netfilter(r5, &(0x7f0000000680)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f0000000700)={0x1ac, 0xb, 0x8, 0x301, 0x70bd25, 0x25dfdbfd, {0x3, 0x0, 0x5}, [@generic="6bbabf459289daa3cc0bd9a857b19faddd35d1a5cd56363b53731917de3673228f85da10d69e3d58378a78780cc0bf3d6f04c82d3c6dc117abfbfc3bcfda82c1503c102d80259c98", @nested={0x14d, 0xc4, 0x0, 0x1, [@nested={0x4, 0xfa3}, @nested={0x4, 0x108}, @generic="373d782ad82f8dce4a484fb63d104e7a04e9cad6e8aaa96aeea64bffa34eaa3f", @nested={0x74, 0x3a, 0x0, 0x1, [@typed={0x70, 0x1, 0x0, 0x0, @binary="df85f995f62593c52510ac42486ab0a8d7c382943c2b78a73cd839c825e2702b68c6e9344ff3f5bc46d081c999a979b60fbc293a3ab9c0b819cfd513533ec03f557ece7976ae63ea44eb6952845bdf2f475002640c6427cfc286d643f108f911f6164ab14ee77df3b03a1ab9"}]}, @generic="bd67186dfa60150574000212ae826e51c56b68eaa4ce631006acc9514a31f198e1ca34b538c9465df5201180ac", @generic="1b676d1d94462a90425d27870c3a9ff043cde2cfa615b1c36b19d22b72636248c73e47129c2c3c26adff1acb0080990dade233fa24a6d633506de0e64168e3099deb40b7a138c1de21d30006250d4a3ab674dc651f95b3b8af4744ae5478ca0d1c16ecc3b435565619b705cac03d3204ca9204ee5006533b76f8dc500a4dd431"]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x40010}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x28, 0x3, 0x8, 0x801, 0x0, 0x0, {0x5, 0x0, 0x2}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4008040)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0))
sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, 0x3, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x4080)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x20000000)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8)

1.022415752s ago: executing program 1 (id=4749):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x63, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x4, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

945.242804ms ago: executing program 0 (id=4750):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000001000090600000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a7ffa888000000001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32=r5], 0x44}}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f00000001c0)=0x5, 0x4)
getsockname$packet(r7, &(0x7f0000000340)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r8}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000)

505.901935ms ago: executing program 3 (id=4751):
r0 = socket$pppoe(0x18, 0x1, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'hsr0\x00', 0x400})
ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x202200, 0x0)
close(r3)
pipe(&(0x7f0000000180)={<r4=>0xffffffffffffffff})
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000400)={'vcan0\x00', <r6=>0x0})
r7 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r7, &(0x7f0000000080)={0x1d, r6, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18)
socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r8, 0x215eb000)
r9 = socket(0x2a, 0x2, 0x0)
getsockname$inet6(r9, 0x0, &(0x7f0000000140))
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r4, r6, 0x25, 0x7, @void}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
ioctl$AUTOFS_IOC_PROTOVER(r10, 0x80049363, &(0x7f0000000280))
ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'})
r11 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000071104100000000009500000000000000a33272ed07fecfa683c7db3a353f62d6cfc9f7a93de571a3e372c15e5efd1aafec45bfe8a03162160ecd007a26716cbf193c6f3e2d6921d1f60d156a5a9e83a4275bc6907fafa1f757d59b4d122826dfe325ee09338dc4cd824bdae8019d0f53af8c9ac607489002211905f67e6c4bec5de4116b3b00bd4ac77c682fc23e8dfb7e512729ec0e9e05dc"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x580, 0x0, 0x310, 0x0, 0x0, 0x1d8, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x6, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xff, 0xff000000, 0xff000000], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'gretap0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x2b, 0x5, 0x1, 0x18}, 0x0, 0xd0, 0xf8, 0x0, {0x7a00000010000000}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0xfc, 0x6}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xb4}, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, [0xff], [0xffffff00], '\x00', 'bond_slave_0\x00', {}, {0xff}}, 0x0, 0xf0, 0x138, 0x48000000, {}, [@common=@dst={{0x48}, {0xff, 0x4, 0x0, [0x1, 0x7a, 0xfffd, 0x3f4, 0x0, 0x3, 0x5, 0x0, 0x8, 0x30, 0xe5, 0x4, 0x1, 0x6, 0x0, 0x1], 0x6}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'ip6gre0\x00', {0x4}}}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0xd}, [0x0, 0xffff00, 0xffffffff], [0xffffff00, 0xffffff00, 0xffffff00, 0xff000000], 'nr0\x00', 'vxcan1\x00', {}, {}, 0x62, 0x5, 0x3, 0x20}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0xf}}}, {{@ipv6={@mcast1, @private0, [0xff000000, 0xffffff, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'pim6reg1\x00', 'hsr0\x00', {}, {}, 0x6c, 0x80, 0x5, 0x61}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e0)
connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x8, @multicast, 'erspan0\x00'}}, 0x1e)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)

441.238879ms ago: executing program 2 (id=4752):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="4400000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="5310318d97ee221e10a0dc6004fec7d031fc318d403c90d732e3cd4ffe78144350fe50576395873ef6e1067cd94a530f06fa2432a0d9b2a907a5dfbbfaddade4d2bfc3bf29e103e1e355864ae37aa8afa870f8a70ebf148268521ec6a5e998f0222744b6b4e16a2fa2b2ca206a7b53415012024bc6b3fb8fe08c5a685de6737394c6546c368aa36887ac77f124b86874a085f8538e750e97b5fba967a241f136c712c8d986a61dad6a07d6f76d08ab73003a16c34c332c44f655b0bce1d590ee06a13ee6b1"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x428a4}}, 0x20}}, 0x8000)

377.410879ms ago: executing program 0 (id=4753):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x0, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_FLOWTABLE_FLAGS={0x0, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x0, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x0, 0x7, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELTABLE={0xfffffd7b, 0x2, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x8084)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0xe, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x20000808)

376.868879ms ago: executing program 4 (id=4754):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x58, 0x0, 0x3}]}}, 0x0, 0x26}, 0x20)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b00), r0)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000020000000c000000180001801400020076657468315f766972745f77696669001800038014"], 0x44}, 0x1, 0x0, 0x0, 0x4054}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, 0x0, &(0x7f00000001c0)=0xfffffffffffffe2f)

355.835641ms ago: executing program 1 (id=4755):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000340)={'syztnl1\x00', <r1=>0x0, 0x2f, 0x6, 0x0, 0xfffffff9, 0x46, @private0, @loopback, 0x1, 0x7, 0x7, 0x9}})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)=@ipv6_newaddr={0xac, 0x14, 0x4, 0x70bd26, 0x25dfdbfc, {0xa, 0x18, 0x40, 0xfd, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x401, 0x6, 0xdd5, 0x4}}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}, @IFA_CACHEINFO={0x14, 0x6, {0x7, 0x86ab, 0x4, 0x1}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0x8, 0x3ff, 0x7fffffff}}, @IFA_LOCAL={0x14, 0x2, @private1}, @IFA_LOCAL={0x14, 0x2, @mcast2}, @IFA_CACHEINFO={0x14, 0x6, {0x1ff, 0x4, 0x4, 0x8}}, @IFA_LOCAL={0x14, 0x2, @private1}]}, 0xac}, 0x1, 0x0, 0x0, 0x4}, 0x4)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r4, 0x84, 0x74, &(0x7f0000000000)=""/48, &(0x7f0000000080)=0x30)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0)

118.376356ms ago: executing program 4 (id=4756):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0)
setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000002c0)=[{{0x1, 0x1, 0x1, 0x1}, {0x0, 0x1, 0x1, 0x1}}], 0x8)
syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) (async)
r3 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="94000000d0d238b188781b1604b0d38299b62fabbd50835f52bf730365b95b3afd6c8b201ffda8ff19d317d74dbbf97ebc341338e4e8e4f6a527e2c6bc0dbf84bf631cf14cf2d8e66d2f3a178f586e81a7730f1e6b8242af4d7171234d63d03a97b60bad27c6111892c56b9a3df0b10123f58ff145e4727de2b72b94317bd186356cd5bd56ae91f1053be648f2bc92749e5fd7ca8eb56a6d5c5789333d57c0a750a7927ca01423597436cd0327d2130bbc5122e7bd53252c360ef42383", @ANYRES16=r3, @ANYBLOB="0100000000000000000001000000680008806400008024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39223c0009801c0000800600010002000000080002007f00000105000300030000001c00008006000100020000000800020000000000050003000200000024000300b08073e8d44e91e3da922c22438244bb885c69e269c8e9d835b114293a4ddc6e1400020077673000"/174], 0xb4}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) (async)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="94000000d0d238b188781b1604b0d38299b62fabbd50835f52bf730365b95b3afd6c8b201ffda8ff19d317d74dbbf97ebc341338e4e8e4f6a527e2c6bc0dbf84bf631cf14cf2d8e66d2f3a178f586e81a7730f1e6b8242af4d7171234d63d03a97b60bad27c6111892c56b9a3df0b10123f58ff145e4727de2b72b94317bd186356cd5bd56ae91f1053be648f2bc92749e5fd7ca8eb56a6d5c5789333d57c0a750a7927ca01423597436cd0327d2130bbc5122e7bd53252c360ef42383", @ANYRES16=r3, @ANYBLOB="0100000000000000000001000000680008806400008024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39223c0009801c0000800600010002000000080002007f00000105000300030000001c00008006000100020000000800020000000000050003000200000024000300b08073e8d44e91e3da922c22438244bb885c69e269c8e9d835b114293a4ddc6e1400020077673000"/174], 0xb4}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000)

490.098µs ago: executing program 0 (id=4757):
r0 = socket$inet6(0xa, 0x2, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000040)=0x730, 0x4)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x4ea180, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x0)
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettclass={0x24, 0x2a, 0x1, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x6, 0xb}, {}, {0xfff1, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x48050}, 0x40000)
sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}, 0x20000}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x8}], 0x1}}], 0x1, 0x40)
socket$inet6(0xa, 0x2, 0x3a) (async)
setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000040)=0x730, 0x4) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x4ea180, 0x0) (async)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async)
socket$unix(0x1, 0x1, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r5, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x0) (async)
socket$unix(0x1, 0x5, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettclass={0x24, 0x2a, 0x1, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x6, 0xb}, {}, {0xfff1, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x48050}, 0x40000) (async)
sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}, 0x20000}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x8}], 0x1}}], 0x1, 0x40) (async)

0s ago: executing program 2 (id=4758):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x50)
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'virt_wifi0\x00', <r2=>0x0})
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x7, '\x00', r2, r1, 0x0, 0x4, 0x5}, 0x50)
r3 = socket(0xa, 0x3, 0x3a)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$TIPC_NL_NODE_GET(r3, 0x0, 0x4011)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0)
close(r6)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140))
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast})
write$cgroup_devices(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="1b23000d"], 0xffdd)
setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, &(0x7f0000000080)="2f7c5d90527948994476cbfa94778b40ab4d91574665336750c9e19b81bd471537c250850e4d7c09143bf0cde5b677d0bd3dce518160d35c84fe68b9ae0437", 0x3f)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xffffffffffffffe1, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [], {0x14}}, 0x70}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010027bd7000fcdbdf2517000000500006804c00040067630600"/37], 0x64}}, 0x48c0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0)
r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_buf(r9, 0x0, 0x20, &(0x7f0000000400)="170000000200020000ffbe8c", 0xc)
setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x1, 0x4b, 0x0, 0x1}, 0xc)

kernel console output (not intermixed with test programs):

 422.530730][T17721] bridge_slave_1: entered allmulticast mode
[  422.540369][T17721] bridge_slave_1: entered promiscuous mode
[  422.550557][T17926] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3179'.
[  422.616343][T17936] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3182'.
[  422.722345][T17721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  422.762567][T17721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  422.950802][T17721] team0: Port device team_slave_0 added
[  422.995942][T17721] team0: Port device team_slave_1 added
[  423.163451][T17721] batman_adv: batadv0: Adding interface: batadv_slave_0
[  423.180630][T17721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  423.220745][T17975] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3190'.
[  423.244466][T17975] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3190'.
[  423.255342][T17721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  423.294367][T17975] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3190'.
[  423.294378][T17721] batman_adv: batadv0: Adding interface: batadv_slave_1
[  423.294391][T17721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  423.389040][T17721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  423.488422][T17986] netlink: 'syz.2.3191': attribute type 1 has an invalid length.
[  423.666026][T17989] 8021q: adding VLAN 0 to HW filter on device bond19
[  423.682306][T17989] bond18: (slave bond19): making interface the new active one
[  423.690331][T17989] bond18: (slave bond19): Enslaving as an active interface with an up link
[  423.789236][T17721] hsr_slave_0: entered promiscuous mode
[  423.796061][T17721] hsr_slave_1: entered promiscuous mode
[  423.802740][T17721] debugfs: 'hsr0' already exists in 'hsr'
[  423.808528][T17721] Cannot create hsr debugfs directory
[  423.831419][ T4943] Bluetooth: hci1: command tx timeout
[  424.311663][T16625] net_ratelimit: 1459 callbacks suppressed
[  424.311680][T16625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  424.492656][T17721] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  424.535452][T17721] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  424.577891][T17721] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  424.595897][T18028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3198'.
[  424.751883][T17721] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  424.777516][T17721] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  424.838035][T17721] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  424.925834][T17721] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  424.956992][T17721] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  424.978839][T17721] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  425.073586][T17721] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  425.103600][T17721] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  425.140540][T17721] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  425.299299][T18059] veth3: entered allmulticast mode
[  425.411580][T18057] bridge0: port 2(bridge_slave_1) entered disabled state
[  425.628384][T18070] bond20 (unregistering): Released all slaves
[  425.810502][T18088] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3213'.
[  425.911267][ T4943] Bluetooth: hci1: command tx timeout
[  425.976856][T18089] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3213'.
[  426.018390][T18088] 8021q: VLANs not supported on ip6_vti0
[  426.125953][T18101] netlink: 'syz.2.3215': attribute type 1 has an invalid length.
[  426.313364][T17721] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  426.355528][T17721] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  426.403197][T17721] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  426.504050][T17721] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  426.544796][T17721] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  426.585540][T17721] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  426.602774][T17721] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  426.642987][T17721] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  426.906713][T18140] bond1: entered promiscuous mode
[  426.911924][T18140] bond1: entered allmulticast mode
[  426.917573][T18140] 8021q: adding VLAN 0 to HW filter on device bond1
[  426.955421][  T585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  426.963584][  T585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  426.972493][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  427.076767][T18150] bond2: entered promiscuous mode
[  427.082854][T18150] bond2: entered allmulticast mode
[  427.088463][T18150] 8021q: adding VLAN 0 to HW filter on device bond2
[  427.184779][T18158] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  427.191408][T18158] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  427.351783][T16628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  427.607931][T18177] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3230'.
[  427.612209][T17721] 8021q: adding VLAN 0 to HW filter on device bond0
[  427.684906][T18177] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3230'.
[  427.726304][T18177] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3230'.
[  427.743779][T17721] 8021q: adding VLAN 0 to HW filter on device team0
[  427.797683][  T585] bridge0: port 1(bridge_slave_0) entered blocking state
[  427.804886][  T585] bridge0: port 1(bridge_slave_0) entered forwarding state
[  427.838017][ T6644] bridge0: port 2(bridge_slave_1) entered blocking state
[  427.845232][ T6644] bridge0: port 2(bridge_slave_1) entered forwarding state
[  427.891966][T18184] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3231'.
[  427.933288][ T6644] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  427.966650][ T6644] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  428.072870][ T6638] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  428.163975][ T6648] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  428.604846][T18215] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3239'.
[  428.621605][T18215] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3239'.
[  428.873155][    C0] ip6_tunnel: L xmit: Local address not yet configured!
[  429.344442][T18237] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3242'.
[  429.362018][T17721] 8021q: adding VLAN 0 to HW filter on device batadv0
[  429.398568][T18241] netlink: 'syz.3.3244': attribute type 2 has an invalid length.
[  429.428140][T18241] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3244'.
[  429.512329][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  429.554187][T17721] veth0_vlan: entered promiscuous mode
[  429.627512][T17721] veth1_vlan: entered promiscuous mode
[  429.744374][T17721] veth0_macvtap: entered promiscuous mode
[  429.767353][T17721] veth1_macvtap: entered promiscuous mode
[  429.797641][T18256] netlink: 'syz.2.3249': attribute type 32 has an invalid length.
[  429.825545][T17721] batman_adv: batadv0: Interface activated: batadv_slave_0
[  429.872075][T17721] batman_adv: batadv0: Interface activated: batadv_slave_1
[  430.057765][ T6638] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  430.201556][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  430.227930][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  430.271555][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  430.335618][ T1127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  430.366906][ T1127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  430.391749][T16627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  430.424556][T18275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  430.461952][T18275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  430.476655][T18275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  430.489349][T18275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  430.507434][ T1127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  430.517548][T18275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  430.532252][ T1127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  430.551845][T18275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  430.578545][T18288] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4.
[  430.600054][T18285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  430.860010][T18298] __nla_validate_parse: 6 callbacks suppressed
[  430.860030][T18298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3259'.
[  430.924041][T18298] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3259'.
[  430.970228][T18301] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3261'.
[  430.993991][T18301] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  431.017396][T18301] batman_adv: batadv0: Removing interface: batadv_slave_1
[  431.056358][T18296] syzkaller1: entered promiscuous mode
[  431.072833][T18296] syzkaller1: entered allmulticast mode
[  431.095120][T18296] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  431.622787][T18318] macvlan0: entered promiscuous mode
[  431.768825][T18329] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3269'.
[  431.784507][T18329] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3269'.
[  431.795793][T18329] netlink: 'syz.3.3269': attribute type 1 has an invalid length.
[  431.920804][T18329] 8021q: adding VLAN 0 to HW filter on device bond3
[  431.932513][ T5631] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  431.956022][ T5631] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  431.966058][ T5631] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  431.974796][ T5631] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  431.983300][ T5631] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  432.636510][T18365] sctp: [Deprecated]: syz.3.3277 (pid 18365) Use of struct sctp_assoc_value in delayed_ack socket option.
[  432.636510][T18365] Use struct sctp_sack_info instead
[  432.655573][T18364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3276'.
[  432.679444][T18368] xt_socket: unknown flags 0x8
[  433.044240][T18384] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3282'.
[  433.064693][T18384] unsupported nlmsg_type 40
[  433.126435][T18388] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3280'.
[  433.213410][T18391] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3283'.
[  433.276264][T18391] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  433.294046][T18394] syzkaller0: entered promiscuous mode
[  433.314745][T18394] syzkaller0: entered allmulticast mode
[  433.578701][T18406] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3287'.
[  433.799677][T18416] netlink: 'syz.2.3290': attribute type 3 has an invalid length.
[  433.828529][T18416] netlink: 'syz.2.3290': attribute type 2 has an invalid length.
[  433.922883][ T6644] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  433.960626][ T6644] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  433.976468][ T6644] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  434.000548][ T6644] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  434.071401][ T5631] Bluetooth: hci2: command tx timeout
[  434.508816][T18450] team0 (unregistering): Port device team_slave_0 removed
[  434.536176][T18450] team0 (unregistering): Port device team_slave_1 removed
[  434.571472][ T5750] IPVS: starting estimator thread 0...
[  434.671334][T18457] IPVS: using max 29 ests per chain, 69600 per kthread
[  435.012139][T18475] SET target dimension over the limit!
[  435.415014][T18336] bridge0: port 1(bridge_slave_0) entered blocking state
[  435.435310][T18336] bridge0: port 1(bridge_slave_0) entered disabled state
[  435.445063][T18336] bridge_slave_0: entered allmulticast mode
[  435.457532][T18336] bridge_slave_0: entered promiscuous mode
[  435.478591][T18336] bridge0: port 2(bridge_slave_1) entered blocking state
[  435.508295][T18336] bridge0: port 2(bridge_slave_1) entered disabled state
[  435.555116][T18336] bridge_slave_1: entered allmulticast mode
[  435.568304][T18507] netlink: 'syz.2.3313': attribute type 13 has an invalid length.
[  435.595512][T18336] bridge_slave_1: entered promiscuous mode
[  435.986153][T18336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  436.030806][T18525] __nla_validate_parse: 13 callbacks suppressed
[  436.075328][T18525] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3317'.
[  436.103772][T18336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  436.151855][ T5631] Bluetooth: hci2: command tx timeout
[  436.216575][T18524] syzkaller1: entered promiscuous mode
[  436.253290][T18524] syzkaller1: entered allmulticast mode
[  436.349001][T18544] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3319'.
[  436.422960][T18336] team0: Port device team_slave_0 added
[  436.444445][T18336] team0: Port device team_slave_1 added
[  436.471951][T16627] net_ratelimit: 8 callbacks suppressed
[  436.471966][T16627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  436.521266][T18543] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  436.591822][T18336] batman_adv: batadv0: Adding interface: batadv_slave_0
[  436.611340][T18336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  436.684318][T18336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  436.710093][T18336] batman_adv: batadv0: Adding interface: batadv_slave_1
[  436.733917][T18336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  436.805488][T18336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  436.833417][T18564] netlink: 'syz.3.3326': attribute type 10 has an invalid length.
[  436.935265][T18564] veth1_macvtap: left promiscuous mode
[  436.957403][T18564] bond0: (slave macsec0): Error -34 calling dev_set_mtu
[  437.156126][T18574] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  437.172403][T18574] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  437.204464][T18336] hsr_slave_0: entered promiscuous mode
[  437.211077][T18336] hsr_slave_1: entered promiscuous mode
[  437.217703][T18336] debugfs: 'hsr0' already exists in 'hsr'
[  437.224436][T18336] Cannot create hsr debugfs directory
[  437.233707][T18579] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  437.249639][T18578] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3331'.
[  437.479667][T18590] netlink: 'syz.2.3335': attribute type 1 has an invalid length.
[  437.556847][T18594] xt_l2tp: missing protocol rule (udp|l2tpip)
[  437.831679][ T6646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  437.870203][T18608] x_tables: duplicate underflow at hook 2
[  437.884907][T18610] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3340'.
[  438.145011][T18622] netlink: 'syz.2.3344': attribute type 1 has an invalid length.
[  438.164877][T18622] netlink: 'syz.2.3344': attribute type 7 has an invalid length.
[  438.173969][T18622] netlink: 'syz.2.3344': attribute type 8 has an invalid length.
[  438.194432][T18622] netlink: 208 bytes leftover after parsing attributes in process `syz.2.3344'.
[  438.231709][ T5631] Bluetooth: hci2: command tx timeout
[  438.242663][T18622] NCSI netlink: No device for ifindex 65584
[  438.414335][T18336] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  438.436269][T18634] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3345'.
[  438.473077][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  438.482026][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  438.513457][T18634] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3345'.
[  438.536303][T18635] netlink: 'syz.3.3345': attribute type 12 has an invalid length.
[  438.547111][T18336] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  438.696995][T18635] bond4: option primary_reselect: invalid value (255)
[  438.707696][T18635] bond4 (unregistering): Released all slaves
[  438.883586][T18336] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  438.927140][T18336] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  439.176172][T18336] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  439.206120][T18336] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  439.274287][T18667] v: renamed from veth0_vlan (while UP)
[  439.375277][T18668] bond21: option arp_all_targets: invalid value (18446744073709551613)
[  439.385829][T18668] bond21 (unregistering): Released all slaves
[  439.414603][T18670] bridge0: port 3(veth1_to_bridge) entered blocking state
[  439.427935][T18670] bridge0: port 3(veth1_to_bridge) entered disabled state
[  439.449652][T18670] veth1_to_bridge: entered allmulticast mode
[  439.458442][T18670] veth1_to_bridge: entered promiscuous mode
[  439.514678][T16627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  439.682894][T18692] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3357'.
[  439.706862][T18693] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3359'.
[  439.719278][T18686] batadv_slave_1: entered promiscuous mode
[  439.747064][T18693] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3359'.
[  439.782590][ T1319] ieee802154 phy1 wpan1: encryption failed: -22
[  439.786818][T18685] batadv_slave_1: left promiscuous mode
[  440.000590][T18706] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  440.313278][ T5631] Bluetooth: hci2: command tx timeout
[  440.714525][T18687] bridge0: port 1(bridge_slave_0) entered disabled state
[  441.363246][T18687] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  441.394417][T18687] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  441.504117][T18687] macvlan0: left promiscuous mode
[  441.606246][T18687] mac80211_hwsim hwsim22 wlan0: left promiscuous mode
[  441.653666][T18714] bridge20: entered promiscuous mode
[  441.659000][T18714] bridge20: entered allmulticast mode
[  441.755121][   T13] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  441.783090][   T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  442.012451][ T1020] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  442.063719][ T1020] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  442.211201][T14498] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  442.258227][T14498] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  442.287951][T14498] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  442.325459][T14498] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  442.393506][ T4943] Bluetooth: hci2: command tx timeout
[  442.555236][T16621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  442.634325][T18798] openvswitch: netlink: IP tunnel dst address not specified
[  442.716022][T18336] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  442.736227][T18336] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  442.772783][T18336] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  442.827875][T18336] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  442.906598][T18336] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  442.946732][T18336] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  442.975613][T18807] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  442.981192][T18336] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  443.017421][T18336] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  443.364689][T18336] 8021q: adding VLAN 0 to HW filter on device bond0
[  443.463557][T18336] 8021q: adding VLAN 0 to HW filter on device team0
[  443.573282][ T6642] bridge0: port 1(bridge_slave_0) entered blocking state
[  443.579513][T18841] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  443.580696][ T6642] bridge0: port 1(bridge_slave_0) entered forwarding state
[  443.604616][ T6644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  443.759793][ T1020] bridge0: port 2(bridge_slave_1) entered blocking state
[  443.767013][ T1020] bridge0: port 2(bridge_slave_1) entered forwarding state
[  443.785340][T18848] __nla_validate_parse: 2 callbacks suppressed
[  443.785356][T18848] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3394'.
[  443.836726][T18850] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3394'.
[  443.858716][T18851] netlink: 260 bytes leftover after parsing attributes in process `syz.1.3395'.
[  444.236254][ T6638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  444.245070][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  444.447963][T18881] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3403'.
[  444.473244][ T4943] Bluetooth: hci2: command 0x0405 tx timeout
[  444.872928][    C0] ip6_tunnel: L xmit: Local address not yet configured!
[  445.006848][T18904] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  445.136684][T18913] lo: Caught tx_queue_len zero misconfig
[  445.223078][T18915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3411'.
[  445.242974][T18915] netlink: 'syz.1.3411': attribute type 1 has an invalid length.
[  445.492851][T18915] bond1: entered promiscuous mode
[  445.524978][T18915] 8021q: adding VLAN 0 to HW filter on device bond1
[  445.591655][T16635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  445.630540][T18933] netlink: 1196 bytes leftover after parsing attributes in process `syz.2.3414'.
[  445.842168][T18336] 8021q: adding VLAN 0 to HW filter on device batadv0
[  446.034269][T18944] bond0 (unregistering): left promiscuous mode
[  446.059304][T18944] bond_slave_0: left promiscuous mode
[  446.092775][T18944] bond_slave_1: left promiscuous mode
[  446.122877][T18944] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  446.152221][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  446.184945][T18944] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  446.214965][T18944] bond0 (unregistering): Released all slaves
[  446.440371][T18971] netlink: 'syz.1.3423': attribute type 10 has an invalid length.
[  446.499172][T18975] netlink: 'syz.2.3424': attribute type 21 has an invalid length.
[  446.540159][T18975] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3424'.
[  446.571293][T18975] netlink: 'syz.2.3424': attribute type 21 has an invalid length.
[  446.587808][T18975] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3424'.
[  446.703282][T18985] mac80211_hwsim hwsim8 syzkaller0: Caught tx_queue_len zero misconfig
[  446.714824][T18983] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[  446.807001][T18336] veth0_vlan: entered promiscuous mode
[  446.820424][T18990] netlink: 'syz.1.3426': attribute type 11 has an invalid length.
[  446.868412][T18336] veth1_vlan: entered promiscuous mode
[  446.936826][T18336] veth0_macvtap: entered promiscuous mode
[  446.952279][T18336] veth1_macvtap: entered promiscuous mode
[  446.999839][T18336] batman_adv: batadv0: Interface activated: batadv_slave_0
[  447.026204][T18336] batman_adv: batadv0: Interface activated: batadv_slave_1
[  447.121650][ T6638] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  447.311103][ T6648] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  447.344824][ T6648] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  447.377245][ T1127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  447.392941][ T6648] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  447.414926][ T1127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  447.462106][T19016] veth1_to_bridge: left allmulticast mode
[  447.476542][T19016] veth1_to_bridge: left promiscuous mode
[  447.482414][T19019] netlink: 216 bytes leftover after parsing attributes in process `syz.2.3435'.
[  447.508546][T19016] bridge0: port 3(veth1_to_bridge) entered disabled state
[  447.566304][T19016] bridge_slave_1: left allmulticast mode
[  447.580069][T19016] bridge_slave_1: left promiscuous mode
[  447.596428][T19016] bridge0: port 2(bridge_slave_1) entered disabled state
[  447.635035][T19016] bridge_slave_0: left allmulticast mode
[  447.659640][T19016] bridge_slave_0: left promiscuous mode
[  447.681219][T19016] bridge0: port 1(bridge_slave_0) entered disabled state
[  447.768803][ T6644] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  447.787140][ T6644] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  447.947933][T19039] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3441'.
[  448.074364][T19044] netlink: 'syz.3.3443': attribute type 21 has an invalid length.
[  448.383443][T19057] syzkaller0: entered promiscuous mode
[  448.401680][T19057] syzkaller0: entered allmulticast mode
[  448.522104][ T4943] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  448.539267][ T4943] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  448.551448][ T4943] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  448.564827][ T4943] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  448.574044][ T4943] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  448.625512][T19061] x_tables: duplicate underflow at hook 2
[  448.644152][T16619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  449.351378][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  449.360050][ T6644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  449.392122][ T1127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  449.401013][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  450.304783][T19133] __nla_validate_parse: 6 callbacks suppressed
[  450.304801][T19133] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3467'.
[  450.520072][T19148] +
: renamed from syzkaller0
[  450.631384][ T5631] Bluetooth: hci0: command tx timeout
[  450.696298][T19150] veth1_macvtap: left promiscuous mode
[  450.820068][T19160] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32)
[  451.063402][T19164] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3474'.
[  451.264024][T19058] bridge0: port 1(bridge_slave_0) entered blocking state
[  451.272582][T19058] bridge0: port 1(bridge_slave_0) entered disabled state
[  451.279870][T19058] bridge_slave_0: entered allmulticast mode
[  451.294063][T19058] bridge_slave_0: entered promiscuous mode
[  451.303802][T19058] bridge0: port 2(bridge_slave_1) entered blocking state
[  451.313051][T19058] bridge0: port 2(bridge_slave_1) entered disabled state
[  451.320308][T19058] bridge_slave_1: entered allmulticast mode
[  451.334502][T19058] bridge_slave_1: entered promiscuous mode
[  451.400233][T19058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  451.428821][T19058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  451.483057][T19058] team0: Port device team_slave_0 added
[  451.492580][T19058] team0: Port device team_slave_1 added
[  451.556881][T19058] batman_adv: batadv0: Adding interface: batadv_slave_0
[  451.565059][T19058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  451.592913][T19058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  451.625264][T19058] batman_adv: batadv0: Adding interface: batadv_slave_1
[  451.635291][T19058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  451.667320][T19058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  451.678482][T16619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  451.744521][T19058] hsr_slave_0: entered promiscuous mode
[  451.753241][T19058] hsr_slave_1: entered promiscuous mode
[  451.759648][T19058] debugfs: 'hsr0' already exists in 'hsr'
[  451.766009][T19058] Cannot create hsr debugfs directory
[  452.043515][T19058] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  452.055104][T19058] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  452.192479][T19058] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  452.203182][T19058] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  452.290779][T19058] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  452.302087][T19058] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  452.375759][T19058] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  452.387341][T19058] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  452.712233][ T5631] Bluetooth: hci0: command tx timeout
[  453.367150][T19138] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  453.536224][T19183] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  453.548457][T19183] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  453.559260][T19183] bond0 (unregistering): Released all slaves
[  453.707112][T19058] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  453.748585][T19058] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  453.767719][T19058] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  453.809916][T19058] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  453.828394][T19185] ipvlan1: entered promiscuous mode
[  453.838268][T19185] ipvlan1: entered allmulticast mode
[  453.862664][T19185] veth0_vlan: entered allmulticast mode
[  453.887730][T19058] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  453.934952][T19058] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  453.958281][T19194] 8021q: adding VLAN 0 to HW filter on device team0
[  453.969111][T19194] team0: Cannot enslave team device to itself
[  453.987356][T19058] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  454.025828][T19058] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  454.044957][T19191] syzkaller0: entered promiscuous mode
[  454.057789][T19191] syzkaller0: entered allmulticast mode
[  454.184242][T19217] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3489'.
[  454.185187][T19213] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.3488'.
[  454.288997][T19219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3489'.
[  454.555848][ T6642] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  454.576864][T19058] 8021q: adding VLAN 0 to HW filter on device bond0
[  454.648196][T19058] 8021q: adding VLAN 0 to HW filter on device team0
[  454.678171][ T1020] bridge0: port 1(bridge_slave_0) entered blocking state
[  454.685367][ T1020] bridge0: port 1(bridge_slave_0) entered forwarding state
[  454.719566][T16619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  454.757607][ T1020] bridge0: port 2(bridge_slave_1) entered blocking state
[  454.764831][ T1020] bridge0: port 2(bridge_slave_1) entered forwarding state
[  454.793907][ T5631] Bluetooth: hci0: command tx timeout
[  454.907610][T19237] bridge0: port 1(bridge_slave_0) entered disabled state
[  454.930402][T19237] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3493'.
[  455.017805][T19241] Bluetooth: MGMT ver 1.23
[  455.043783][T19244] netlink: 'syz.4.3496': attribute type 12 has an invalid length.
[  455.085632][T19244] openvswitch: netlink: Key 0 has unexpected len 4 expected 0
[  455.113787][ T6644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  455.122873][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  455.218133][T19250] netlink: 'syz.1.3498': attribute type 1 has an invalid length.
[  455.326225][T19256] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3501'.
[  455.408742][T19253] macvtap1: entered allmulticast mode
[  455.490713][T19260] vlan0: entered allmulticast mode
[  455.505024][T19260] bridge1: entered allmulticast mode
[  455.624903][T19250] bond2: (slave bridge1): making interface the new active one
[  455.636965][T19250] bond2: (slave bridge1): Enslaving as an active interface with an up link
[  455.674857][T19256] bridge1: port 1(erspan0) entered blocking state
[  455.683652][T19256] bridge1: port 1(erspan0) entered disabled state
[  455.704257][T19256] erspan0: entered allmulticast mode
[  455.726868][T19256] erspan0: entered promiscuous mode
[  455.750598][T19256] bridge1: port 1(erspan0) entered blocking state
[  455.757295][T19256] bridge1: port 1(erspan0) entered forwarding state
[  455.840403][T19272] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  455.912650][T19278] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3505'.
[  456.217733][T19292] netlink: 'syz.1.3510': attribute type 10 has an invalid length.
[  456.544099][T19309] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3513'.
[  456.632351][   T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  456.646995][T19058] 8021q: adding VLAN 0 to HW filter on device batadv0
[  456.866569][T19312] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  456.905114][T19330] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3516'.
[  457.023171][T19312] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  457.226108][T19334] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3519'.
[  457.248638][T19312] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  457.261970][T19336] xt_CT: You must specify a L4 protocol and not use inversions on it
[  457.292388][T19340] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3521'.
[  457.339552][T19340] xt_policy: neither incoming nor outgoing policy selected
[  457.465048][T19312] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  457.508590][T19058] veth0_vlan: entered promiscuous mode
[  457.520023][T19346] ieee802154 phy1 wpan1: encryption failed: -22
[  457.531015][ T6638] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  457.563882][ T6638] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  457.583579][T19058] veth1_vlan: entered promiscuous mode
[  457.623754][ T1020] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  457.699426][T19058] veth0_macvtap: entered promiscuous mode
[  457.752302][T16621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  457.797398][T19058] veth1_macvtap: entered promiscuous mode
[  457.871324][T19058] batman_adv: batadv0: Interface activated: batadv_slave_0
[  457.907263][T19058] batman_adv: batadv0: Interface activated: batadv_slave_1
[  457.934060][  T585] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  458.072549][   T13] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  458.102508][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  458.201463][  T585] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  458.210372][T19367] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3531'.
[  458.244749][  T585] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  458.270603][T19369] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  458.318237][ T1020] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  458.347367][T19377] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3533'.
[  458.367773][ T1020] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  458.523577][  T585] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  458.533961][T14498] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  458.545943][  T585] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  458.664880][ T1020] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  458.696449][ T1020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  458.712758][T19386] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3535'.
[  458.777261][T19389] hsr0: entered allmulticast mode
[  458.797601][T19389] hsr_slave_0: entered allmulticast mode
[  458.823052][T19389] hsr_slave_1: entered allmulticast mode
[  458.880606][T19395] netlink: 288 bytes leftover after parsing attributes in process `syz.2.3444'.
[  459.265261][T19415] sctp: [Deprecated]: syz.1.3543 (pid 19415) Use of int in maxseg socket option.
[  459.265261][T19415] Use struct sctp_assoc_value instead
[  459.285400][ T5631] block nbd0: Receive control failed (result -32)
[  459.686182][T19426] syzkaller0: entered promiscuous mode
[  459.711906][T19426] syzkaller0: entered allmulticast mode
[  460.240572][ T6638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  460.250407][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  460.267006][ T6642] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  460.791803][T16620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  462.158231][T19457] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  462.175454][T19459] netlink: 'syz.2.3555': attribute type 1 has an invalid length.
[  462.224724][T19459] macvtap1: entered allmulticast mode
[  462.442079][T19473] ieee802154 phy1 wpan1: encryption failed: -22
[  462.578888][T19479] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING
[  462.729185][T19485] bridge: RTM_NEWNEIGH with invalid state 0x20
[  462.743335][T19488] sctp: [Deprecated]: syz.4.3564 (pid 19488) Use of struct sctp_assoc_value in delayed_ack socket option.
[  462.743335][T19488] Use struct sctp_sack_info instead
[  462.796006][T19491] netlink: 'syz.4.3564': attribute type 1 has an invalid length.
[  462.823785][T19491] __nla_validate_parse: 2 callbacks suppressed
[  462.823799][T19491] netlink: 16179 bytes leftover after parsing attributes in process `syz.4.3564'.
[  462.993801][T19500] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3567'.
[  463.070168][T19505] vlan2: entered allmulticast mode
[  463.077969][T19505] bridge2: entered allmulticast mode
[  463.100038][T19506] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3569'.
[  463.123901][T19506] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3569'.
[  463.261795][T19514] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3572'.
[  463.832109][T16635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  463.899126][T19536] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  463.978075][T19546] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3580'.
[  463.992965][T19536] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  464.168539][T19557] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3582'.
[  464.419057][T19572] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3587'.
[  464.499474][T19575] gretap0: entered promiscuous mode
[  464.513954][T19575] vlan2: entered promiscuous mode
[  464.773423][T19589] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3595'.
[  464.839578][T19596] xt_cgroup: path and classid specified
[  464.857728][T19592] xt_CT: No such helper "snmp"
[  464.995798][T19602] veth1_to_bond: entered allmulticast mode
[  465.015573][T19602] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3598'.
[  465.130737][T19604] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  465.317810][T19602] veth1_to_bond: left allmulticast mode
[  465.359716][ T6642] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  465.368701][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  466.002899][ T6638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  466.193849][T19673] netlink: 'syz.4.3613': attribute type 32 has an invalid length.
[  466.508143][T16635] IPVS: starting estimator thread 0...
[  466.621757][T19690] IPVS: using max 28 ests per chain, 67200 per kthread
[  466.859351][T19712] syzkaller0: entered promiscuous mode
[  466.876401][T19712] syzkaller0: entered allmulticast mode
[  466.882586][T16620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  467.229305][T19719] netlink: 'syz.1.3630': attribute type 5 has an invalid length.
[  467.348722][T19733] xt_recent: Unsupported userspace flags (000000b1)
[  467.399197][T19739] vlan0: entered promiscuous mode
[  467.682786][T19743] bond3: entered promiscuous mode
[  467.705849][T19743] 8021q: adding VLAN 0 to HW filter on device bond3
[  467.853376][T19761] __nla_validate_parse: 15 callbacks suppressed
[  467.853394][T19761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3639'.
[  468.997209][T19795] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3651'.
[  469.062402][T19791] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3651'.
[  469.453305][T19806] netlink: 'syz.1.3656': attribute type 4 has an invalid length.
[  469.710596][T19814] netlink: 'syz.1.3658': attribute type 10 has an invalid length.
[  469.917400][T16620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  469.952582][T19826] netlink: 'syz.2.3662': attribute type 1 has an invalid length.
[  470.180577][T19836] block nbd0: reconnected socket
[  470.188213][ T5631] block nbd0: Receive control failed (result -107)
[  470.267540][T19840] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3665'.
[  470.474608][ T6638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  470.483921][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  470.670176][T19860] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3671'.
[  470.712012][T19860] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3671'.
[  470.722828][ T1127] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  470.756474][ T1127] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  470.831062][ T1127] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  470.862518][ T1127] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  470.913609][T19865] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  470.972093][T19868] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  471.027651][T19865] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  471.140048][T19865] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  471.161971][T19868] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  471.280331][T19865] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  471.345013][T19868] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  471.467885][T19868] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  471.597178][T19893] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  471.676169][T19868] IPVS: set_ctl: invalid protocol: 169 172.20.20.187:20002
[  471.755190][ T6640] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  471.829632][T19900] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3681'.
[  472.139798][T19908] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  472.589822][T19927] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3687'.
[  472.616145][T19930] sch_tbf: peakrate 4 is lower than or equals to rate 24576 !
[  472.756849][T19927] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3687'.
[  472.952432][T16635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  473.026520][T19940] netlink: 'syz.3.3693': attribute type 2 has an invalid length.
[  473.420026][T19960] netlink: 'syz.3.3698': attribute type 1 has an invalid length.
[  473.461139][T19960] netlink: 240 bytes leftover after parsing attributes in process `syz.3.3698'.
[  473.499564][T19960] netlink: 'syz.3.3698': attribute type 1 has an invalid length.
[  473.579746][T19962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3697'.
[  473.702993][T19962] netlink: 'syz.1.3697': attribute type 4 has an invalid length.
[  473.784456][T19976] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3702'.
[  473.876696][T19982] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3704'.
[  474.331930][T19998] bridge_slave_0: default FDB implementation only supports local addresses
[  474.383923][T20001] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3712'.
[  474.473337][T20001] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3712'.
[  474.482874][ T6644] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  474.510504][ T6644] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  474.541079][ T6644] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  474.583321][ T6644] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  475.436054][T20032] batadv_slave_1: entered promiscuous mode
[  475.450096][T20031] batadv_slave_1: left promiscuous mode
[  475.657267][T20038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3727'.
[  475.786838][ T1020] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  475.991189][T16618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  476.173075][T20057] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  476.233147][ T1127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  476.242626][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  476.284152][T20059] netlink: 'syz.4.3733': attribute type 4 has an invalid length.
[  476.309246][T20059] netlink: 'syz.4.3733': attribute type 2 has an invalid length.
[  476.338634][T20059] netlink: 'syz.4.3733': attribute type 2 has an invalid length.
[  476.349133][T20059] netlink: 27 bytes leftover after parsing attributes in process `syz.4.3733'.
[  476.872147][ T6640] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  477.511255][    C0] ip6_tunnel: L xmit: Local address not yet configured!
[  478.151987][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  478.479900][T20022] Set syz1 is full, maxelem 65536 reached
[  478.647306][T20040] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  478.915363][T20083] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3741'.
[  479.041160][T16620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  479.126295][T20083] 8021q: adding VLAN 0 to HW filter on device bond4
[  479.161927][T20083] bond0: (slave bond4): Enslaving as an active interface with an up link
[  479.668567][T20118] bridge0: port 1(bridge_slave_0) entered blocking state
[  479.675870][T20118] bridge0: port 1(bridge_slave_0) entered forwarding state
[  479.772429][T20124] netlink: 'syz.4.3752': attribute type 39 has an invalid length.
[  479.916911][T20132] netlink: 'syz.1.3754': attribute type 1 has an invalid length.
[  479.938392][T20131] netlink: 'syz.1.3754': attribute type 1 has an invalid length.
[  480.277919][T20142] sctp: [Deprecated]: syz.4.3757 (pid 20142) Use of int in maxseg socket option.
[  480.277919][T20142] Use struct sctp_assoc_value instead
[  480.363002][T20147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3758'.
[  480.421693][T20147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3758'.
[  480.519657][T20150] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3759'.
[  480.549357][T20150] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3759'.
[  480.604529][T20150] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  480.751723][T20159] netlink: 'syz.4.3762': attribute type 4 has an invalid length.
[  480.896148][ T6638] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  481.997689][ T1127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  482.006895][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  482.071163][T16635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  482.633442][ T6640] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  483.803248][T20163] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  484.092345][T20205] netlink: 'syz.1.3774': attribute type 61 has an invalid length.
[  484.161468][T20205] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3774'.
[  484.184604][T20214] x_tables: duplicate underflow at hook 2
[  484.882239][T14498] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  485.113868][T16635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  485.252170][T20259] xfrm1: entered allmulticast mode
[  485.483414][T20269] erspan0: entered promiscuous mode
[  485.488842][T20269] erspan0: entered allmulticast mode
[  485.555561][T20271] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3796'.
[  485.832179][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  487.753405][ T6646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  487.762729][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  487.781430][T20242] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  488.153067][T16635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  488.219077][T20304] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3807'.
[  488.392801][ T6646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  488.800091][T20344] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  488.819811][ T1115] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  488.902117][T20350] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3817'.
[  488.943699][T20355] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3821'.
[  489.025883][T20357] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3817'.
[  489.072058][T20357] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3817'.
[  489.714789][T20365] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3824'.
[  490.789769][T20383] netlink: 'syz.4.3830': attribute type 21 has an invalid length.
[  490.809314][T20383] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3830'.
[  490.831584][T20383] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3830'.
[  491.192541][T16618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  491.618902][T20336] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  491.924362][T20397] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3835'.
[  491.945291][T20397] netlink: 'syz.2.3835': attribute type 10 has an invalid length.
[  491.980873][T20397] bridge0: port 2(bridge_slave_1) entered disabled state
[  491.988650][T20397] bridge0: port 1(bridge_slave_0) entered disabled state
[  492.155620][T20403] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3837'.
[  492.219425][T20410] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3839'.
[  492.580658][T20427] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3843'.
[  492.605894][T20427] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3843'.
[  492.615909][T20427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3843'.
[  492.967722][ T1127] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  493.026689][T20445] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.3849'.
[  493.040523][T20397] infiniband syz1: set active
[  493.046139][T20397] infiniband syz1: added bridge_slave_1
[  493.055829][T20397] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR
[  493.058701][T20397] infiniband syz1: Couldn't open port 1
[  493.074590][T20397] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  493.091252][T20397] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  493.126299][T20397] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  493.226401][T20397] RDS/IB: syz1: added
[  493.246688][T20397] smc: adding ib device syz1 with port count 1
[  493.276101][T20397] smc:    ib device syz1 port 1 has no pnetid
[  493.511679][ T6640] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  493.520539][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  494.152978][ T1115] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  494.231154][T16618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  495.298516][T20461] syzkaller1: entered promiscuous mode
[  495.306126][T20461] syzkaller1: entered allmulticast mode
[  495.847582][T20436] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  496.170492][T20476] netlink: 'syz.4.3853': attribute type 3 has an invalid length.
[  496.233119][T20476] __nla_validate_parse: 1 callbacks suppressed
[  496.233137][T20476] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3853'.
[  496.435749][T20490] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3859'.
[  496.721656][T20506] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  496.775266][T20506] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3861'.
[  496.841995][T20511] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[  496.938270][T20513] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3862'.
[  496.997665][T20514] openvswitch: netlink: VXLAN extension 317 out of range max 1
[  497.274390][T16618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  497.304077][T20525] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3865'.
[  498.163413][T20564] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3873'.
[  498.333593][T20571] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3872'.
[  498.724191][ T1127] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  498.909317][T20597] macvlan0: entered promiscuous mode
[  498.971272][T20600] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3880'.
[  499.271962][ T6644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  499.280880][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  499.547982][T20623] bridge0: port 2(bridge_slave_1) entered disabled state
[  499.555676][T20623] bridge0: port 1(bridge_slave_0) entered disabled state
[  499.642864][T20623] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  499.661126][T20623] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  499.834103][ T6644] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  499.852948][ T6644] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  499.865543][ T6644] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  499.898338][ T6644] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  499.915288][  T585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  499.928777][ T6644] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  499.963146][ T6644] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  500.011548][  T585] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  500.042712][  T585] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  500.311330][T16635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  501.192889][ T1319] ieee802154 phy1 wpan1: encryption failed: -22
[  501.586925][T20585] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  501.883782][T20661] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3895'.
[  501.937660][T20661] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  502.122792][T20673] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3899'.
[  502.328684][T20690] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3903'.
[  502.352758][T20690] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3903'.
[  502.421253][T20693] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3902'.
[  502.490281][T20693] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3902'.
[  502.555038][T20693] netlink: 'syz.1.3902': attribute type 6 has an invalid length.
[  502.581547][T20693] netlink: 'syz.1.3902': attribute type 5 has an invalid length.
[  502.589369][T20693] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3902'.
[  502.656694][ T6638] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  503.020283][T20719] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  503.059170][T20721] syzkaller0: entered promiscuous mode
[  503.085123][T20721] syzkaller0: entered allmulticast mode
[  503.234445][T20721] 0: reclassify loop, rule prio 0, protocol 700
[  503.271248][T20731] netlink: 'syz.1.3909': attribute type 39 has an invalid length.
[  503.357287][T16635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  503.504022][T20737] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3910'.
[  503.604051][T20740] mac80211_hwsim hwsim29 wlan0: entered promiscuous mode
[  503.644136][T20740] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3911'.
[  503.654352][T20740] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3911'.
[  505.031428][ T6644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  505.040276][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  505.485781][T20697] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  505.677134][T14493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  506.299103][T20783] syzkaller0: entered promiscuous mode
[  506.306952][T20783] syzkaller0: entered allmulticast mode
[  506.392388][T16635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  506.423897][T14493] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  506.835588][T20815] netlink: 'syz.1.3936': attribute type 7 has an invalid length.
[  506.946076][T20823] netlink: 'syz.2.3938': attribute type 13 has an invalid length.
[  507.341384][T20843] veth1: Caught tx_queue_len zero misconfig
[  507.357457][T20847] __nla_validate_parse: 4 callbacks suppressed
[  507.357475][T20847] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3942'.
[  507.379575][T20850] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3943'.
[  509.298979][T20790] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  509.436558][T16635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  509.559373][T20862] geneve2: entered promiscuous mode
[  509.573963][T20862] geneve2: entered allmulticast mode
[  509.611076][ T1020] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0
[  509.648500][ T1020] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0
[  509.699018][ T1020] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0
[  509.733678][ T1020] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0
[  510.423113][   T13] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  510.791271][T14493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  510.800001][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  511.432192][T14493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  512.471233][T16635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  513.322271][T20911] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  513.517210][ T4943] Bluetooth: hci5: command 0x0406 tx timeout
[  513.586198][T20947] netlink: zone id is out of range
[  513.650049][T20947] netlink: zone id is out of range
[  513.677170][T20957] netlink: 'syz.2.3970': attribute type 10 has an invalid length.
[  513.695868][T20947] netlink: zone id is out of range
[  513.701998][T20947] netlink: zone id is out of range
[  513.707396][T20947] netlink: zone id is out of range
[  513.713894][T20947] netlink: zone id is out of range
[  513.719598][T20957] syz_tun: entered promiscuous mode
[  513.760605][T20957] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  513.968899][T20968] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3973'.
[  514.044601][T20971] bridge1: the hash_elasticity option has been deprecated and is always 16
[  514.452735][T20983] "syz.4.3978" (20983) uses obsolete ecb(arc4) skcipher
[  514.572697][T20988] bond0: Unable to set up delay as MII monitoring is disabled
[  514.584656][T20988] bond0 (unregistering): Released all slaves
[  514.627001][ T6640] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  514.653103][T21001] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3980'.
[  514.757054][T21014] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3983'.
[  516.553601][T14498] net_ratelimit: 74 callbacks suppressed
[  516.553623][T14498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  516.568459][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  517.191824][T14498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  517.486760][T20996] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  517.502754][T21042] netlink: 'syz.4.3986': attribute type 11 has an invalid length.
[  517.531710][T21042] netlink: 4312 bytes leftover after parsing attributes in process `syz.4.3986'.
[  517.738445][T21047] netlink: 'syz.0.3988': attribute type 1 has an invalid length.
[  517.795727][T21056] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3991'.
[  517.814030][T21047] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3988'.
[  517.860555][T21057] batman_adv: batadv0: Adding interface: wlan0
[  517.918005][T21057] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  517.945736][T21048] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3988'.
[  517.957114][T21057] batman_adv: batadv0: Interface activated: wlan0
[  518.098182][T21070] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3993'.
[  518.142262][T21070] 0„ž{X¹¦: renamed from gretap0 (while UP)
[  518.153180][T21074] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3994'.
[  518.189405][T21070] 0„ž{X¹¦: entered allmulticast mode
[  518.213580][T21070] A link change request failed with some changes committed already. Interface 
30„ž{X¹¦ may have been left with an inconsistent configuration, please check.
[  518.552470][T16635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  518.708488][T21109] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4000'.
[  518.775255][ T1115] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  519.197461][T21132] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4006'.
[  519.534006][T21151] lo: Caught tx_queue_len zero misconfig
[  519.907827][T21159] netlink: 'syz.1.4013': attribute type 1 has an invalid length.
[  519.933169][T21159] bond4: option mode: invalid value (7)
[  519.940367][T21159] bond4 (unregistering): Released all slaves
[  519.960697][T21164] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  519.972523][T21164] batman_adv: batadv0: Removing interface: batadv_slave_0
[  520.213576][T21166] netlink: 'syz.3.4014': attribute type 1 has an invalid length.
[  520.283356][T21168] bond6: (slave geneve3): making interface the new active one
[  520.291782][T21168] bond6: (slave geneve3): Enslaving as an active interface with an up link
[  520.301410][   T13] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  520.311018][   T13] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  520.314984][T21166] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4014'.
[  520.320177][   T13] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  520.339837][   T13] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  520.358634][T21166] 8021q: adding VLAN 0 to HW filter on device bond6
[  521.592620][T16618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  521.601762][T21104] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  521.630250][T21162] netlink: 'syz.1.4013': attribute type 2 has an invalid length.
[  521.650845][T21162] netlink: 244 bytes leftover after parsing attributes in process `syz.1.4013'.
[  521.685418][ T1115] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  521.694541][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  522.288080][T21208] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4025'.
[  522.487076][T21212] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4028'.
[  522.863030][T21237] IPv6: NLM_F_REPLACE set, but no existing node found!
[  522.901930][T21237] IPv6: NLM_F_REPLACE set, but no existing node found!
[  522.912750][T21237] IPv6: NLM_F_REPLACE set, but no existing node found!
[  522.924772][T21237] IPv6: NLM_F_REPLACE set, but no existing node found!
[  522.935628][T21237] IPv6: NLM_F_REPLACE set, but no existing node found!
[  522.961407][ T1115] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  522.982533][T21239] ip6gre1: entered allmulticast mode
[  522.984814][T21237] IPv6: NLM_F_REPLACE set, but no existing node found!
[  523.018069][T21237] IPv6: NLM_F_REPLACE set, but no existing node found!
[  523.040665][T21237] IPv6: NLM_F_REPLACE set, but no existing node found!
[  523.042398][T21241] ip6tnl0: Caught tx_queue_len zero misconfig
[  523.087852][T21237] IPv6: NLM_F_REPLACE set, but no existing node found!
[  523.119970][T21237] IPv6: NLM_F_REPLACE set, but no existing node found!
[  523.140099][T16618] IPVS: starting estimator thread 0...
[  523.150723][T21236] netlink: 304 bytes leftover after parsing attributes in process `syz.2.4034'.
[  523.157668][T21237] IPv6: NLM_F_REPLACE set, but no existing node found!
[  523.186526][T21237] IPv6: NLM_F_REPLACE set, but no existing node found!
[  523.205494][T21250] ip6t_rpfilter: unknown options
[  523.212306][T21237] IPv6: NLM_F_REPLACE set, but no existing node found!
[  523.231893][T21247] IPVS: using max 31 ests per chain, 74400 per kthread
[  523.240641][T21237] IPv6: NLM_F_REPLACE set, but no existing node found!
[  523.248645][T21250] dvmrp8: entered allmulticast mode
[  523.256730][T21237] IPv6: NLM_F_REPLACE set, but no existing node found!
[  523.266490][T21237] IPv6: NLM_F_REPLACE set, but no existing node found!
[  523.299794][T21237] IPv6: NLM_F_REPLACE set, but no existing node found!
[  523.331664][T21237] IPv6: NLM_F_REPLACE set, but no existing node found!
[  523.372868][T21237] IPv6: NLM_F_REPLACE set, but no existing node found!
[  523.406141][T21237] IPv6: NLM_F_REPLACE set, but no existing node found!
[  523.438802][T21237] IPv6: NLM_F_REPLACE set, but no existing node found!
[  523.467787][T21237] IPv6: NLM_F_REPLACE set, but no existing node found!
[  523.475823][T21237] IPv6: NLM_F_REPLACE set, but no existing node found!
[  523.483492][T21237] IPv6: NLM_F_REPLACE set, but no existing node found!
[  523.490748][T21237] IPv6: NLM_F_REPLACE set, but no existing node found!
[  523.498461][T21237] IPv6: NLM_F_REPLACE set, but no existing node found!
[  523.529872][T21237] IPv6: NLM_F_REPLACE set, but no existing node found!
[  523.557308][T21237] IPv6: NLM_F_REPLACE set, but no existing node found!
[  523.577766][T21237] IPv6: NLM_F_REPLACE set, but no existing node found!
[  523.599110][T21237] IPv6: NLM_F_REPLACE set, but no existing node found!
[  523.622470][T21237] IPv6: NLM_F_REPLACE set, but no existing node found!
[  523.652264][T21237] IPv6: NLM_F_REPLACE set, but no existing node found!
[  523.755590][ T4943] Bluetooth: hci3: command 0x0406 tx timeout
[  523.982694][T21281] netlink: 'syz.2.4045': attribute type 6 has an invalid length.
[  524.554707][T21305] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4055'.
[  524.631763][T16618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  524.824963][T21323] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4057'.
[  524.848134][T21319] netlink: 'syz.2.4057': attribute type 1 has an invalid length.
[  524.891853][T21323] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4057'.
[  524.921270][T21319] netlink: 'syz.2.4057': attribute type 2 has an invalid length.
[  524.959637][T21323] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4057'.
[  525.193322][T21337] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4066'.
[  525.252530][T21341] syzkaller0: entered promiscuous mode
[  525.274338][T21341] syzkaller0: entered allmulticast mode
[  525.532883][T21349] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4068'.
[  525.594372][T21355] ªªªªª»: renamed from dummy0
[  525.761998][T21369] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4075'.
[  525.929707][T21372] netlink: 196 bytes leftover after parsing attributes in process `syz.4.4077'.
[  525.945122][T21377] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4079'.
[  526.270030][T21391] netlink: 'syz.4.4084': attribute type 3 has an invalid length.
[  526.294002][T21391] netlink: 'syz.4.4084': attribute type 1 has an invalid length.
[  526.325522][T21391] netlink: 204 bytes leftover after parsing attributes in process `syz.4.4084'.
[  526.342629][T21395] bridge_slave_1: left allmulticast mode
[  526.349336][T21395] bridge_slave_1: left promiscuous mode
[  526.359518][T21395] bridge0: port 2(bridge_slave_1) entered disabled state
[  526.623516][T21412] netlink: 'syz.0.4089': attribute type 3 has an invalid length.
[  526.904410][T21395] bridge_slave_0: left allmulticast mode
[  526.912911][T21395] bridge_slave_0: left promiscuous mode
[  526.918842][T21395] bridge0: port 1(bridge_slave_0) entered disabled state
[  527.085071][T21398] bond0: ARP target 8.4.0.0 is already present
[  527.091946][T21398] bond0: option arp_ip_target: invalid value (1032)
[  527.255510][T21414] netlink: 'syz.3.4091': attribute type 10 has an invalid length.
[  527.336900][T21414] team0: Port device geneve1 added
[  527.433145][ T6638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  527.442329][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  527.672266][T16620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  528.355937][T21464] xt_ipcomp: unknown flags 1D
[  528.409224][T21459] IPVS: persistence engine module ip_vs_pe_À
 not found
[  528.549346][T21473] netlink: 'syz.4.4108': attribute type 1 has an invalid length.
[  528.589800][T21471] syzkaller0: entered promiscuous mode
[  528.623991][T21471] syzkaller0: entered allmulticast mode
[  528.893203][T21491] netlink: 'syz.2.4114': attribute type 1 has an invalid length.
[  528.930654][T21491] bridge0: Device is already in use.
[  530.042198][T21526] __nla_validate_parse: 14 callbacks suppressed
[  530.042217][T21526] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4125'.
[  530.156586][T21526] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4125'.
[  530.232890][T21534] ipt_rpfilter: unknown options
[  530.235013][T21526] netlink: 'syz.1.4125': attribute type 32 has an invalid length.
[  530.300314][T21526] netlink: 500 bytes leftover after parsing attributes in process `syz.1.4125'.
[  530.367866][ T6638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  530.553708][T18747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  530.562790][T21555] syzkaller0: entered promiscuous mode
[  530.578830][T21555] syzkaller0: entered allmulticast mode
[  530.631710][ T6644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  530.711982][T16618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  530.740577][T21555] openvswitch: netlink: IPv6 tunnel dst address is zero
[  530.809426][T21564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  530.854709][T21564] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4137'.
[  530.875404][T21564] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4137'.
[  530.894795][T21562] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1500) !
[  530.908620][T21564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  530.927188][T21562] syzkaller0: entered promiscuous mode
[  530.937444][T21562] syzkaller0: entered allmulticast mode
[  531.427551][T21584] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4144'.
[  531.468744][T21588] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4144'.
[  531.544242][T21586] can: request_module (can-proto-0) failed.
[  531.634765][T21595] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4147'.
[  531.713603][T21597] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4149'.
[  531.814929][T21604] syzkaller0: entered promiscuous mode
[  531.820510][T21604] syzkaller0: entered allmulticast mode
[  531.931794][T21606] tipc: Started in network mode
[  531.945815][T21606] tipc: Node identity ac14142f, cluster identity 4711
[  531.967201][T21606] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  532.220595][T21619] netdevsim netdevsim2: Firmware load for './file0/file0/..' refused, path contains '..' component
[  532.239952][T21620] netlink: 'syz.1.4158': attribute type 1 has an invalid length.
[  532.441076][T21633] netdevsim netdevsim2: Firmware load for './file0/file0/..' refused, path contains '..' component
[  532.633598][T18747] net_ratelimit: 5 callbacks suppressed
[  532.633613][T18747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  532.655604][ T1115] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  532.689837][T21645] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4162'.
[  532.883982][T21651] syz_tun: entered allmulticast mode
[  532.899407][T21652] geneve1: Caught tx_queue_len zero misconfig
[  532.939270][T21654] dvmrp8: entered allmulticast mode
[  533.116940][T21645] hsr_slave_1 (unregistering): left promiscuous mode
[  533.193142][ T6646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  533.202232][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  533.220471][T21672] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  533.239879][T21654] IPv6: Can't replace route, no match found
[  533.293480][T21644] syz_tun: left allmulticast mode
[  533.606199][T21669] syzkaller0: entered promiscuous mode
[  533.625234][T21669] syzkaller0: entered allmulticast mode
[  533.681057][T16635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  533.689200][T18749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  533.760951][T16635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  533.823194][T14498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  533.831986][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  533.977860][T21697] syzkaller0: entered promiscuous mode
[  533.990662][T21697] syzkaller0: entered allmulticast mode
[  534.285247][T21706] 8021q: VLANs not supported on ip_vti0
[  534.733968][T21726] IPVS: set_ctl: invalid protocol: 12 127.0.0.1:20004
[  535.056031][T21735] 8021q: adding VLAN 0 to HW filter on device bond7
[  535.073942][T21735] __nla_validate_parse: 6 callbacks suppressed
[  535.073959][T21735] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4186'.
[  535.174646][T21735] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR
[  535.484939][T21755] tc action pedit unable to extract header offset for header type (0x4)
[  535.504072][T21755] tc action pedit unable to extract header offset for header type (0x4)
[  535.512494][T21755] tc action pedit unable to extract header offset for header type (0x4)
[  535.520917][T21755] tc action pedit unable to extract header offset for header type (0x4)
[  535.529267][T21755] tc action pedit unable to extract header offset for header type (0x4)
[  535.537695][T21755] tc action pedit unable to extract header offset for header type (0x4)
[  535.546226][T21755] tc action pedit unable to extract header offset for header type (0x4)
[  535.554608][T21755] tc action pedit unable to extract header offset for header type (0x4)
[  535.563018][T21755] tc action pedit unable to extract header offset for header type (0x4)
[  535.571392][T21755] tc action pedit unable to extract header offset for header type (0x4)
[  535.721148][T21763] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4194'.
[  535.751713][ T4943] Bluetooth: hci2: command 0x0405 tx timeout
[  535.879188][T21763] netlink: 'syz.3.4194': attribute type 8 has an invalid length.
[  535.912483][T21763] sch_fq: defrate 0 ignored.
[  536.259348][T21784] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4199'.
[  536.296635][T21784] macvlan0: entered promiscuous mode
[  536.323789][T21784] macvlan0: entered allmulticast mode
[  536.397194][T21792] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4201'.
[  536.512747][T21792] team0: Caught tx_queue_len zero misconfig
[  536.810058][T21810] netlink: 'syz.2.4205': attribute type 10 has an invalid length.
[  536.896744][T21812] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4206'.
[  536.913102][T21810] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  536.959534][T21812] IPVS: length: 24 != 12312
[  537.167333][T21822] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4210'.
[  537.595519][T21841] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4216'.
[  537.622839][T21841] netlink: 144 bytes leftover after parsing attributes in process `syz.4.4216'.
[  537.686129][T21849] net_ratelimit: 13 callbacks suppressed
[  537.686148][T21849] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  537.912923][T18749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  538.029640][T21861] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4222'.
[  538.166769][T21874] sctp: [Deprecated]: syz.4.4225 (pid 21874) Use of struct sctp_assoc_value in delayed_ack socket option.
[  538.166769][T21874] Use struct sctp_sack_info instead
[  538.225193][T21862] bond7: (slave bridge3): Enslaving as an active interface with an up link
[  538.320274][T18747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  538.332113][T21878] netlink: 'syz.2.4226': attribute type 15 has an invalid length.
[  538.366718][ T1115] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  538.400382][T21880] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4227'.
[  538.413209][ T6646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  538.703412][ T6644] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  538.968995][T18749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  539.034007][ T6649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  539.043537][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  539.425902][T21888] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  539.581833][ T6649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  539.699541][T21912] sctp: [Deprecated]: syz.2.4235 (pid 21912) Use of struct sctp_assoc_value in delayed_ack socket option.
[  539.699541][T21912] Use struct sctp_sack_info instead
[  539.717371][T21914] mac80211_hwsim hwsim22 wlan0: entered promiscuous mode
[  539.832024][T16620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  540.231656][T21935] netlink: 'syz.4.4243': attribute type 2 has an invalid length.
[  540.246086][T21928] ip6gre1: entered allmulticast mode
[  540.309382][T21935] batman_adv: batadv0: Removing interface: batadv_slave_0
[  540.346093][T21935] batman_adv: batadv0: Removing interface: batadv_slave_1
[  540.775921][T21964] __nla_validate_parse: 1 callbacks suppressed
[  540.775940][T21964] netlink: 45 bytes leftover after parsing attributes in process `syz.4.4250'.
[  540.802919][T21963] dvmrp8: left allmulticast mode
[  541.092562][T21976] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4253'.
[  541.603844][T21998] netlink: 'syz.4.4260': attribute type 10 has an invalid length.
[  541.623815][T21998] veth0_macvtap: left promiscuous mode
[  541.645928][T21998] team0: Device veth0_macvtap failed to register rx_handler
[  542.139216][T22020] netlink: 'syz.3.4268': attribute type 1 has an invalid length.
[  542.152600][    C0] ip6_tunnel: L xmit: Local address not yet configured!
[  542.229639][T22020] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4268'.
[  542.285846][T22020] NCSI netlink: No device for ifindex 0
[  542.299557][T22016] erspan0: left allmulticast mode
[  542.309110][T22019] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4267'.
[  542.344124][T22016] erspan0: left promiscuous mode
[  542.368503][T22016] bridge1: port 1(erspan0) entered disabled state
[  542.496352][T22016] bridge_slave_0: left allmulticast mode
[  542.542584][T22016] bridge_slave_0: left promiscuous mode
[  542.573593][T22016] bridge0: port 1(bridge_slave_0) entered disabled state
[  542.605412][T22016] bridge_slave_1: left allmulticast mode
[  542.622140][T22016] bridge_slave_1: left promiscuous mode
[  542.638201][T22016] bridge0: port 2(bridge_slave_1) entered disabled state
[  542.683878][T22040] netlink: 'syz.2.4272': attribute type 12 has an invalid length.
[  542.696072][T22040] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4272'.
[  542.712765][T22016] bond0: (slave bond_slave_0): Releasing backup interface
[  542.756293][T22016] bond0: (slave bond_slave_1): Releasing backup interface
[  542.796222][T22016] team0: Port device team_slave_0 removed
[  542.848927][T22016] team0: Port device team_slave_1 removed
[  542.882411][T22016] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  542.893722][T16635] net_ratelimit: 12 callbacks suppressed
[  542.893736][T16635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  542.925060][T22016] batman_adv: batadv0: Removing interface: batadv_slave_0
[  542.925439][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  542.942584][T16635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  542.973648][T16620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  542.996591][T22016] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  543.017420][T22016] batman_adv: batadv0: Removing interface: batadv_slave_1
[  543.043439][T22016] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  543.066996][T22017] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4268'.
[  543.181955][T14493] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  543.239859][T22038] syzkaller1: entered promiscuous mode
[  543.281749][T22038] syzkaller1: entered allmulticast mode
[  543.774501][T22070] netlink: 'syz.4.4280': attribute type 10 has an invalid length.
[  543.846679][T22050] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  543.860399][T22050] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  543.894829][T22062] syzkaller0: entered promiscuous mode
[  543.914178][T22062] syzkaller0: entered allmulticast mode
[  543.955965][T22056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  544.142806][ T6646] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  544.171106][ T6646] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  544.207182][ T6646] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  544.231321][T21767] Bluetooth: hci1: command 0x0406 tx timeout
[  544.262536][T22080] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4283'.
[  544.605120][T22095] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4288'.
[  544.717793][T14493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  544.728180][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  545.096241][T22112] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4292'.
[  545.303037][T22116] gre2: entered promiscuous mode
[  545.375327][T22119] veth1_to_bond: Caught tx_queue_len zero misconfig
[  545.995283][T22152] netlink: 'syz.1.4302': attribute type 1 has an invalid length.
[  546.003568][T16635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  546.044008][T22152] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4302'.
[  546.117466][T22159] netlink: 312 bytes leftover after parsing attributes in process `syz.3.4303'.
[  546.174551][T22161] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4305'.
[  546.551637][T22180] netlink: 'syz.3.4307': attribute type 4 has an invalid length.
[  546.600454][T22180] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4307'.
[  546.652749][T22183] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4310'.
[  546.682588][T22183] netlink: 'syz.0.4310': attribute type 4 has an invalid length.
[  546.702552][T22180] .`: renamed from bond0 (while UP)
[  546.717482][T22183] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4310'.
[  546.734445][T22188] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4312'.
[  546.773183][T22189] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4312'.
[  546.805787][T22189] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4312'.
[  546.831793][T22183] .`: renamed from bond0
[  546.992496][T22188] bond0: entered promiscuous mode
[  547.036498][T22188] 8021q: adding VLAN 0 to HW filter on device bond0
[  547.180064][   T29] audit: type=1804 audit(1785519405.602:6): pid=22202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4315" name="/newroot/150/cgroup.controllers" dev="tmpfs" ino=788 res=1 errno=0
[  547.189499][T22206] FAULT_INJECTION: forcing a failure.
[  547.189499][T22206] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  547.219222][T22209] tipc: Started in network mode
[  547.238202][ T6644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  547.269225][T22209] tipc: Node identity 78563412785634122143658721436587, cluster identity 4711
[  547.296699][T22206] CPU: 1 UID: 0 PID: 22206 Comm: syz.0.4316 Not tainted syzkaller #0 PREEMPT(full) 
[  547.296724][T22206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  547.296749][T22206] Call Trace:
[  547.296821][T22206]  <TASK>
[  547.296890][T22206]  dump_stack_lvl+0xe8/0x150
[  547.297070][T22206]  should_fail_ex+0x40c/0x560
[  547.297207][T22206]  _copy_from_user+0x2d/0xb0
[  547.297261][T22206]  ___sys_sendmsg+0x1c6/0x360
[  547.297353][T22206]  ? __lock_acquire+0x683/0x2cf0
[  547.297441][T22206]  ? __pfx____sys_sendmsg+0x10/0x10
[  547.297507][T22206]  ? __fget_files+0x2a/0x420
[  547.297567][T22206]  ? __fget_files+0x3a2/0x420
[  547.297609][T22206]  __x64_sys_sendmsg+0x1b1/0x290
[  547.297638][T22206]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  547.297684][T22206]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  547.297729][T22206]  do_syscall_64+0x174/0x580
[  547.297852][T22206]  ? trace_irq_disable+0x3b/0x140
[  547.297903][T22206]  ? clear_bhb_loop+0x40/0x90
[  547.297930][T22206]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  547.297953][T22206] RIP: 0033:0x7f6715b9e019
[  547.297980][T22206] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  547.298005][T22206] RSP: 002b:00007f6716a2d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  547.298056][T22206] RAX: ffffffffffffffda RBX: 00007f6715e25fa0 RCX: 00007f6715b9e019
[  547.298073][T22206] RDX: 0000000000004005 RSI: 0000200000000280 RDI: 0000000000000007
[  547.298087][T22206] RBP: 00007f6716a2d090 R08: 0000000000000000 R09: 0000000000000000
[  547.298100][T22206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  547.298113][T22206] R13: 00007f6715e26038 R14: 00007f6715e25fa0 R15: 00007fff73ed4a88
[  547.298149][T22206]  </TASK>
[  547.351407][   T29] audit: type=1800 audit(1785519405.652:7): pid=22202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4315" name="cgroup.controllers" dev="tmpfs" ino=788 res=0 errno=0
[  547.800370][T22217] team0: Device gtp0 is up. Set it down before adding it as a team port
[  547.926550][T22220] erspan0: entered promiscuous mode
[  547.938809][T22220] vlan1: entered promiscuous mode
[  548.029663][T22235] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4322'.
[  548.094184][T22235] team0: Port device team_slave_0 removed
[  548.109511][T22227] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  548.335248][T22249] netlink: 'syz.3.4327': attribute type 1 has an invalid length.
[  548.345832][T22246] macvtap1: entered promiscuous mode
[  548.362665][T22246] macvtap1: entered allmulticast mode
[  548.368198][T22246] veth1_vlan: entered allmulticast mode
[  548.459484][T22252] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check.
[  548.478026][T22252] netlink: 'syz.2.4328': attribute type 21 has an invalid length.
[  548.559689][T22258] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  548.575661][ T1127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  548.610710][T18748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  548.623207][T16635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  548.809324][T22265] netlink: 'syz.1.4334': attribute type 30 has an invalid length.
[  548.973352][T22281] netlink: 'syz.2.4336': attribute type 1 has an invalid length.
[  548.983840][T22280] FAULT_INJECTION: forcing a failure.
[  548.983840][T22280] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  549.109159][T22280] CPU: 0 UID: 0 PID: 22280 Comm: syz.3.4332 Not tainted syzkaller #0 PREEMPT(full) 
[  549.109185][T22280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  549.109196][T22280] Call Trace:
[  549.109203][T22280]  <TASK>
[  549.109212][T22280]  dump_stack_lvl+0xe8/0x150
[  549.109245][T22280]  should_fail_ex+0x40c/0x560
[  549.109274][T22280]  _copy_from_user+0x2d/0xb0
[  549.109294][T22280]  __copy_msghdr+0x390/0x590
[  549.109321][T22280]  ___sys_sendmsg+0x213/0x360
[  549.109341][T22280]  ? __lock_acquire+0x683/0x2cf0
[  549.109371][T22280]  ? __pfx____sys_sendmsg+0x10/0x10
[  549.109427][T22280]  ? __fget_files+0x2a/0x420
[  549.109470][T22280]  ? __fget_files+0x3a2/0x420
[  549.109507][T22280]  __x64_sys_sendmsg+0x1b1/0x290
[  549.109533][T22280]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  549.109574][T22280]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  549.109597][T22280]  do_syscall_64+0x174/0x580
[  549.109620][T22280]  ? trace_irq_disable+0x3b/0x140
[  549.109647][T22280]  ? clear_bhb_loop+0x40/0x90
[  549.109682][T22280]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  549.109700][T22280] RIP: 0033:0x7f53e6b9e019
[  549.109717][T22280] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  549.109751][T22280] RSP: 002b:00007f53e7a4e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  549.109773][T22280] RAX: ffffffffffffffda RBX: 00007f53e6e26180 RCX: 00007f53e6b9e019
[  549.109787][T22280] RDX: 0000000000004005 RSI: 0000200000000280 RDI: 0000000000000007
[  549.109800][T22280] RBP: 00007f53e7a4e090 R08: 0000000000000000 R09: 0000000000000000
[  549.109825][T22280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  549.109835][T22280] R13: 00007f53e6e26218 R14: 00007f53e6e26180 R15: 00007fff0e183ca8
[  549.109865][T22280]  </TASK>
[  550.145330][T22323] IPVS: Unknown mcast interface: vcan0
[  550.369183][T22327] FAULT_INJECTION: forcing a failure.
[  550.369183][T22327] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  550.435033][T22327] CPU: 1 UID: 0 PID: 22327 Comm: syz.3.4348 Not tainted syzkaller #0 PREEMPT(full) 
[  550.435051][T22327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  550.435059][T22327] Call Trace:
[  550.435064][T22327]  <TASK>
[  550.435070][T22327]  dump_stack_lvl+0xe8/0x150
[  550.435094][T22327]  should_fail_ex+0x40c/0x560
[  550.435116][T22327]  _copy_to_user+0x31/0xb0
[  550.435131][T22327]  simple_read_from_buffer+0xe1/0x170
[  550.435154][T22327]  proc_fail_nth_read+0x1bb/0x230
[  550.435202][T22327]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  550.435224][T22327]  ? rw_verify_area+0x24a/0x4c0
[  550.435248][T22327]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  550.435266][T22327]  vfs_read+0x213/0xa80
[  550.435282][T22327]  ? __pfx___mutex_lock+0x10/0x10
[  550.435353][T22327]  ? __pfx_vfs_read+0x10/0x10
[  550.435367][T22327]  ? __fget_files+0x2a/0x420
[  550.435412][T22327]  ? __fget_files+0x3a2/0x420
[  550.435436][T22327]  ? __fget_files+0x2a/0x420
[  550.435471][T22327]  ksys_read+0x150/0x270
[  550.435496][T22327]  ? __pfx_ksys_read+0x10/0x10
[  550.435515][T22327]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  550.435530][T22327]  do_syscall_64+0x174/0x580
[  550.435545][T22327]  ? trace_irq_disable+0x3b/0x140
[  550.435564][T22327]  ? clear_bhb_loop+0x40/0x90
[  550.435581][T22327]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  550.435593][T22327] RIP: 0033:0x7f53e6b5e84e
[  550.435605][T22327] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  550.435617][T22327] RSP: 002b:00007f53e7a8ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  550.435631][T22327] RAX: ffffffffffffffda RBX: 00007f53e7a906c0 RCX: 00007f53e6b5e84e
[  550.435640][T22327] RDX: 000000000000000f RSI: 00007f53e7a900a0 RDI: 0000000000000008
[  550.435649][T22327] RBP: 00007f53e7a90090 R08: 0000000000000000 R09: 0000000000000000
[  550.435657][T22327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  550.435664][T22327] R13: 00007f53e6e26038 R14: 00007f53e6e25fa0 R15: 00007fff0e183ca8
[  550.435685][T22327]  </TASK>
[  550.472283][ T6646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  550.657165][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  550.673148][T22333] xt_CT: You must specify a L4 protocol and not use inversions on it
[  551.086541][T22349] __nla_validate_parse: 16 callbacks suppressed
[  551.086565][T22349] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4354'.
[  551.173018][T22352] tipc: Started in network mode
[  551.180391][T22352] tipc: Node identity 2003, cluster identity 4711
[  551.229170][T22352] tipc: Node number set to 8195
[  551.446045][T22362] netlink: 'syz.4.4359': attribute type 4 has an invalid length.
[  551.636161][T22378] netlink: 'syz.2.4362': attribute type 1 has an invalid length.
[  551.672501][T16620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  552.306377][T22405] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4373'.
[  552.376316][T22410] netlink: 199784 bytes leftover after parsing attributes in process `syz.4.4374'.
[  552.388202][T22410] netlink: 'syz.4.4374': attribute type 1 has an invalid length.
[  552.444628][T22411] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4374'.
[  552.693236][T22428] netlink: 'syz.1.4375': attribute type 4 has an invalid length.
[  552.741959][T22417] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4375'.
[  553.036117][ T6649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  553.273023][T22452] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4384'.
[  553.319320][T22459] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4385'.
[  553.330578][T22452] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4384'.
[  553.352672][T22460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4385'.
[  553.374014][T22459] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4385'.
[  553.922827][T22484] syzkaller0: entered promiscuous mode
[  553.958481][T22484] syzkaller0: entered allmulticast mode
[  554.173656][T22494] netlink: 'syz.2.4394': attribute type 2 has an invalid length.
[  554.312004][ T1115] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  554.324267][T16620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  554.334316][T16635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  554.639885][T22523] sctp: [Deprecated]: syz.0.4405 (pid 22523) Use of int in max_burst socket option.
[  554.639885][T22523] Use struct sctp_assoc_value instead
[  554.682211][T22523] veth5: entered allmulticast mode
[  554.695407][T22523] sctp: [Deprecated]: syz.0.4405 (pid 22523) Use of struct sctp_assoc_value in delayed_ack socket option.
[  554.695407][T22523] Use struct sctp_sack_info instead
[  554.713189][T22524] netlink: 'syz.3.4404': attribute type 3 has an invalid length.
[  556.231306][ T1115] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  556.240228][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  556.763371][T22486] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  557.352148][T16620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  557.378693][T22601] __nla_validate_parse: 15 callbacks suppressed
[  557.378709][T22601] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4427'.
[  557.415989][T22606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4428'.
[  557.455603][T22606] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4428'.
[  557.508902][ T1020] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  557.575353][T22619] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  557.590722][T22619] netlink: 'syz.4.4432': attribute type 4 has an invalid length.
[  557.822997][T22631] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4428'.
[  557.847596][T22631] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4428'.
[  557.919546][T22633] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4434'.
[  558.017094][T22636] --map-set only usable from mangle table
[  558.455263][T22652] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4438'.
[  558.657803][T22664] netlink: 312 bytes leftover after parsing attributes in process `syz.0.4441'.
[  558.714060][T22667] netlink: 'syz.0.4442': attribute type 2 has an invalid length.
[  558.794223][ T6646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  559.108991][T22679] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4445'.
[  559.120330][T22679] netlink: 13 bytes leftover after parsing attributes in process `syz.0.4445'.
[  560.072754][ T6646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  560.085016][T18749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  560.095538][T16635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  560.244895][T22601] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  560.283020][T22630] netlink: 'syz.2.4428': attribute type 1 has an invalid length.
[  560.782715][T22688] syzkaller1: entered promiscuous mode
[  560.822927][T22688] syzkaller1: entered allmulticast mode
[  561.352816][ T6644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  561.361768][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  561.775829][T22734] netlink: 'syz.1.4458': attribute type 21 has an invalid length.
[  561.995750][T22747] netlink: 'syz.0.4464': attribute type 32 has an invalid length.
[  562.311493][T22761] netlink: 'syz.4.4466': attribute type 23 has an invalid length.
[  562.526149][T22776] __nla_validate_parse: 11 callbacks suppressed
[  562.526166][T22776] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4471'.
[  562.580455][T22780] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4473'.
[  562.634059][ T1319] ieee802154 phy1 wpan1: encryption failed: -22
[  562.637334][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  562.682375][T22776] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4471'.
[  562.897287][T22776] bond0: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0)
[  562.972222][T22776] bond0 (unregistering): Released all slaves
[  563.117127][T16620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  563.213277][T22811] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4480'.
[  563.266902][T22815] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  563.315757][T22818] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4482'.
[  563.496524][T22827] netlink: 'syz.3.4485': attribute type 1 has an invalid length.
[  563.557240][T22830] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4485'.
[  563.643040][T22830] 8021q: adding VLAN 0 to HW filter on device bond0
[  563.677843][T22827] bridge4: entered promiscuous mode
[  563.715134][T22827] bond0: (slave bridge4): making interface the new active one
[  563.725356][T22827] bond0: (slave bridge4): Enslaving as an active interface with an up link
[  563.978481][T22834] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4486'.
[  564.028963][T22834] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4486'.
[  564.363761][T22850] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  564.553557][T14493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  564.864826][T22877] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4496'.
[  565.059910][T22877] hsr_slave_0: left promiscuous mode
[  565.080225][T22877] hsr_slave_1: left promiscuous mode
[  565.209572][T22885] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4498'.
[  565.323454][T22889] netlink: 'syz.3.4499': attribute type 6 has an invalid length.
[  565.374298][T22889] TCP: TCP_TX_DELAY enabled
[  565.465821][T22893] openvswitch: netlink: Missing key (keys=c0, expected=880)
[  565.834062][ T6642] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  565.844267][T16620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  565.859643][T16618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  565.860374][T22908] netlink: 'syz.0.4505': attribute type 4 has an invalid length.
[  566.055274][T22911] tap0: tun_chr_ioctl cmd 1074025672
[  566.060686][T22911] tap0: ignored: set checksum disabled
[  566.295158][T22922] sctp: [Deprecated]: syz.2.4510 (pid 22922) Use of int in max_burst socket option deprecated.
[  566.295158][T22922] Use struct sctp_assoc_value instead
[  566.432571][T22929] openvswitch: netlink: Missing valid actions attribute.
[  566.439812][T22929] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  566.982247][T22944] syzkaller0: entered promiscuous mode
[  567.010432][T22944] syzkaller0: entered allmulticast mode
[  567.113461][ T1115] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  567.123216][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  567.612190][T22976] syzkaller0: entered promiscuous mode
[  567.625612][T22976] syzkaller0: entered allmulticast mode
[  567.852077][T22984] sctp: [Deprecated]: syz.0.4530 (pid 22984) Use of struct sctp_assoc_value in delayed_ack socket option.
[  567.852077][T22984] Use struct sctp_sack_info instead
[  568.872531][T16620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  569.222556][T23047] __nla_validate_parse: 7 callbacks suppressed
[  569.222575][T23047] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4551'.
[  569.250751][T23047] openvswitch: netlink: Flow actions attr not present in new flow.
[  569.370752][T23050] syzkaller1: entered promiscuous mode
[  569.393739][T23050] syzkaller1: entered allmulticast mode
[  569.859008][T23071] netlink: 'syz.1.4554': attribute type 1 has an invalid length.
[  569.870339][T23071] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4554'.
[  570.045337][T23075] kthread_run failed with err -4
[  570.053098][T23078] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4558'.
[  570.189507][T23087] netlink: 'syz.2.4562': attribute type 21 has an invalid length.
[  570.212965][T23087] IPv6: NLM_F_CREATE should be specified when creating new route
[  570.222085][T23087] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4562'.
[  570.254652][T23091] netlink: 'syz.3.4564': attribute type 1 has an invalid length.
[  570.308718][T23091] bond8: entered promiscuous mode
[  570.316174][T23091] 8021q: adding VLAN 0 to HW filter on device bond8
[  570.386622][T23089] syzkaller0: entered promiscuous mode
[  570.420675][T23089] syzkaller0: entered allmulticast mode
[  570.456493][T23098] netlink: 232 bytes leftover after parsing attributes in process `syz.0.4563'.
[  570.484034][T23087] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4562'.
[  570.690395][T23101] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4567'.
[  570.752526][T23105] netlink: 1 bytes leftover after parsing attributes in process `syz.1.4566'.
[  570.773008][T23105] xt_policy: neither incoming nor outgoing policy selected
[  570.985668][T23110] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4570'.
[  570.995525][T23112] pim6reg: entered allmulticast mode
[  571.360399][T23134] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4576'.
[  571.592540][ T6649] net_ratelimit: 1 callbacks suppressed
[  571.592559][ T6649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  571.607156][ T5359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  571.620481][T16618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  571.797159][T23158] netlink: 'syz.1.4582': attribute type 34 has an invalid length.
[  571.864023][T23158] bond4: option lacp_strict: invalid value (112)
[  571.876353][T23158] bond4 (unregistering): Released all slaves
[  572.187978][T23167] netlink: 'syz.1.4585': attribute type 12 has an invalid length.
[  572.280221][T23171] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  572.650965][T21689] Bluetooth: hci2: link tx timeout
[  572.656774][T21689] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  572.673875][T21689] Bluetooth: hci2: link tx timeout
[  572.682008][T21689] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  572.877912][ T6640] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  572.888277][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  572.976563][T23201] bond4: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0)
[  572.997222][T23201] bond4 (unregistering): Released all slaves
[  573.903866][T23250] sock: sock_set_timeout: `syz.4.4606' (pid 23250) tries to set negative timeout
[  574.059629][T23258] hsr0: left allmulticast mode
[  574.064728][T23258] hsr_slave_0: left allmulticast mode
[  574.070293][T23258] hsr_slave_1: left allmulticast mode
[  574.135078][T23258] ip6gre1: left allmulticast mode
[  574.164859][T23263] netlink: 'syz.4.4609': attribute type 11 has an invalid length.
[  574.189554][T23258] bond0: left promiscuous mode
[  574.214173][T23258] veth1_vlan: left allmulticast mode
[  574.222583][T23258] macvtap1: left promiscuous mode
[  574.227682][T23258] macvtap1: left allmulticast mode
[  574.244261][T23264] syzkaller0: entered promiscuous mode
[  574.254868][T23264] syzkaller0: entered allmulticast mode
[  574.277069][T23268] __nla_validate_parse: 9 callbacks suppressed
[  574.277086][T23268] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4610'.
[  574.311256][T23268] block nbd5: Unsupported socket: should be TCP or UNIX.
[  574.353876][T23268] netlink: 'syz.0.4610': attribute type 5 has an invalid length.
[  574.390925][T23179] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  574.711318][T16621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  574.719592][T21689] Bluetooth: hci2: command 0x0405 tx timeout
[  575.163654][T23298] vlan1: entered promiscuous mode
[  575.210085][T23298] bridge0: entered promiscuous mode
[  575.245384][T23298] vlan1: entered allmulticast mode
[  575.303367][T23298] bridge0: entered allmulticast mode
[  575.310648][T23311] sctp: [Deprecated]: syz.4.4621 (pid 23311) Use of int in maxseg socket option.
[  575.310648][T23311] Use struct sctp_assoc_value instead
[  575.449029][ T1020] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  575.509622][T23320] x_tables: unsorted underflow at hook 1
[  575.555347][T23322] IPVS: sh: FWM 3 0x00000003 - no destination available
[  575.773207][T23331] netlink: 'syz.4.4626': attribute type 8 has an invalid length.
[  575.821787][T23331] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4626'.
[  575.850517][T23337] netlink: 'syz.2.4629': attribute type 8 has an invalid length.
[  576.104322][T23348] netlink: 'syz.2.4633': attribute type 62 has an invalid length.
[  576.139990][T23342] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  576.161823][T23350] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4635'.
[  576.238711][T23342] bond0 (unregistering): Released all slaves
[  576.443685][T23367] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4638'.
[  576.484107][T23350] bond9 (unregistering): Released all slaves
[  576.791236][T21689] Bluetooth: hci2: command 0x0405 tx timeout
[  577.000074][T23391] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.4646'.
[  577.079211][T23393] netlink: 'syz.0.4644': attribute type 1 has an invalid length.
[  577.087908][T23395] IPVS: set_ctl: invalid protocol: 43 0.0.0.0:20004
[  577.096794][T23393] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4644'.
[  577.156212][T23393] nbd1: detected capacity change from 0 to 127
[  577.165250][T23398] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4648'.
[  577.202152][ T1674] block nbd1: Dead connection, failed to find a fallback
[  577.213905][ T1674] block nbd1: shutting down sockets
[  577.220354][ T1674] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  577.235006][ T1674] Buffer I/O error on dev nbd1, logical block 0, async page read
[  577.250108][ T1674] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  577.262010][ T1674] Buffer I/O error on dev nbd1, logical block 1, async page read
[  577.270897][ T1674] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  577.280419][ T1674] Buffer I/O error on dev nbd1, logical block 2, async page read
[  577.289098][ T1674] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  577.300204][ T1674] Buffer I/O error on dev nbd1, logical block 3, async page read
[  577.309079][ T1674] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  577.319143][ T1674] Buffer I/O error on dev nbd1, logical block 0, async page read
[  577.328044][ T1674] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  577.338375][ T1674] Buffer I/O error on dev nbd1, logical block 1, async page read
[  577.347005][ T1674] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  577.349102][T23402] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4648'.
[  577.356554][ T1674] Buffer I/O error on dev nbd1, logical block 2, async page read
[  577.356795][ T1674] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  577.356821][ T1674] Buffer I/O error on dev nbd1, logical block 3, async page read
[  577.356924][ T1674] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  577.356948][ T1674] Buffer I/O error on dev nbd1, logical block 0, async page read
[  577.357049][ T1674] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  577.357074][ T1674] Buffer I/O error on dev nbd1, logical block 1, async page read
[  577.369479][T17035] ldm_validate_partition_table(): Disk read failed.
[  577.376485][ T6644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  577.394214][T17035] Dev nbd1: unable to read RDB block 0
[  577.428967][T16620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  577.464151][T16620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  577.472653][T17035]  nbd1: unable to read partition table
[  577.547941][T17035] ldm_validate_partition_table(): Disk read failed.
[  577.585237][T17035] Dev nbd1: unable to read RDB block 0
[  577.617443][T17035]  nbd1: unable to read partition table
[  577.749279][T23414] netlink: 'syz.4.4653': attribute type 15 has an invalid length.
[  577.999218][ T1020] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  578.008933][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  578.288237][T23434] syzkaller1: entered promiscuous mode
[  578.320465][T23434] syzkaller1: entered allmulticast mode
[  578.798115][T23453] netlink: 112 bytes leftover after parsing attributes in process `syz.1.4660'.
[  578.970070][T23458] xt_hashlimit: size too large, truncated to 1048576
[  579.104679][T23464] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4662'.
[  579.154868][T23470] sctp: [Deprecated]: syz.0.4662 (pid 23470) Use of struct sctp_assoc_value in delayed_ack socket option.
[  579.154868][T23470] Use struct sctp_sack_info instead
[  579.234217][T23464] netlink: 'syz.0.4662': attribute type 10 has an invalid length.
[  579.289725][T23464] rdma_rxe: rxe_newlink: failed to add bridge_slave_1
[  579.322826][T23474] __nla_validate_parse: 2 callbacks suppressed
[  579.322843][T23474] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4665'.
[  579.345790][T23474] netlink: 'syz.1.4665': attribute type 9 has an invalid length.
[  579.394803][T23476] ieee802154 phy1 wpan1: encryption failed: -22
[  579.593625][T23484] netlink: 'syz.0.4668': attribute type 1 has an invalid length.
[  579.892623][T23502] netlink: 'syz.4.4670': attribute type 21 has an invalid length.
[  579.954322][T23502] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4670'.
[  580.216186][T23523] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4678'.
[  580.283138][T23524] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4678'.
[  580.471968][T16618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  580.706814][T23546] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4681'.
[  580.787519][T23548] syzkaller1: entered allmulticast mode
[  581.153828][T23577] ip6t_rpfilter: unknown options
[  581.169829][T23577] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4687'.
[  581.183806][T23573] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4688'.
[  581.211846][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  581.831358][T21767] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  582.388250][T23619] syzkaller1: entered promiscuous mode
[  582.410295][T23619] syzkaller1: entered allmulticast mode
[  582.426674][T23628] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4701'.
[  582.752769][T23635] xt_connbytes: Forcing CT accounting to be enabled
[  582.823386][T23635] xt_CT: You must specify a L4 protocol and not use inversions on it
[  582.956452][T23635] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4704'.
[  583.089838][T23639] bond1 (unregistering): Released all slaves
[  583.116758][T14493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  583.125664][T18748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  583.139141][T16618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  583.253686][T23649] netlink: 'syz.2.4704': attribute type 19 has an invalid length.
[  583.555985][T23670] netlink: 'syz.4.4715': attribute type 1 has an invalid length.
[  583.612008][T23670] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4715'.
[  583.754731][ T6648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  583.764293][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  583.917418][T23689] netlink: 'syz.2.4717': attribute type 2 has an invalid length.
[  584.052312][T23689] : entered promiscuous mode
[  584.059852][T23699] openvswitch: netlink: Actions may not be safe on all matching packets
[  584.515087][T23715] __nla_validate_parse: 2 callbacks suppressed
[  584.515105][T23715] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4722'.
[  584.618475][T23722] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4724'.
[  584.981614][T23730] pim6reg527: entered allmulticast mode
[  585.574012][T23760] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4734'.
[  585.585188][T23760] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4734'.
[  585.623589][T23760] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4734'.
[  585.633439][T23760] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4734'.
[  585.770233][T23764] bond9: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-xor(2)
[  585.786479][T23764] bond9 (unregistering): Released all slaves
[  585.853375][T23771] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4738'.
[  586.106228][T23785] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4740'.
[  586.150672][T23773] 8021q: adding VLAN 0 to HW filter on device bond1
[  586.157915][T16618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  586.194650][T23773] bridge0: port 3(bond1) entered blocking state
[  586.244062][T23773] bridge0: port 3(bond1) entered disabled state
[  586.291902][T23773] bond1: entered allmulticast mode
[  586.368909][T23773] bond1: entered promiscuous mode
[  586.506198][T23800] netlink: 'syz.0.4744': attribute type 21 has an invalid length.
[  586.570526][T23800] IPv6: NLM_F_CREATE should be specified when creating new route
[  586.586109][T23800] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  586.593392][T23800] IPv6: NLM_F_CREATE should be set when creating new route
[  586.600728][T23800] IPv6: NLM_F_CREATE should be set when creating new route
[  586.608020][T23800] IPv6: NLM_F_CREATE should be set when creating new route
[  586.761606][T23815] sctp: [Deprecated]: syz.3.4748 (pid 23815) Use of int in maxseg socket option.
[  586.761606][T23815] Use struct sctp_assoc_value instead
[  586.801942][T23811] tun0: tun_chr_ioctl cmd 1074025675
[  586.813194][T23816] netlink: 'syz.1.4749': attribute type 7 has an invalid length.
[  586.831947][T23818] netlink: 'syz.0.4750': attribute type 1 has an invalid length.
[  586.845523][T23811] tun0: persist disabled
[  586.913460][T23825] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4748'.
[  586.943439][T23816] netlink: 'syz.1.4749': attribute type 7 has an invalid length.
[  586.952522][T14493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  587.032869][T23818] 8021q: adding VLAN 0 to HW filter on device bond8
[  587.045418][T23819] tun0: tun_chr_ioctl cmd 1075343107
[  587.087553][T23823] vlan2: entered promiscuous mode
[  587.095040][T23823] bond8: entered promiscuous mode
[  587.100404][T23823] vlan2: entered allmulticast mode
[  587.108922][T23823] bond8: entered allmulticast mode
[  587.159172][T23832] bond8: (slave bridge3): making interface the new active one
[  587.180841][T23832] bridge3: entered promiscuous mode
[  587.198999][T23832] bridge3: entered allmulticast mode
[  587.208872][T23832] bond8: (slave bridge3): Enslaving as an active interface with an up link
[  587.383591][T23838] netlink: 'syz.2.4752': attribute type 1 has an invalid length.
[  587.506052][T23838] 8021q: adding VLAN 0 to HW filter on device bond2
[  587.568785][T23846] bond2: (slave gretap2): Enslaving as a backup interface with an up link
[  587.631482][T23847] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4755'.
[  587.704315][T23849] 
[  587.706680][T23849] ======================================================
[  587.713736][T23849] WARNING: possible circular locking dependency detected
[  587.720879][T23849] syzkaller #0 Not tainted
[  587.725307][T23849] ------------------------------------------------------
[  587.732382][T23849] syz.4.4756/23849 is trying to acquire lock:
[  587.738461][T23849] ffffffff8ec848e0 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x15b/0x650
[  587.747724][T23849] 
[  587.747724][T23849] but task is already holding lock:
[  587.755107][T23849] ffff8880263d03b8 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340
[  587.764628][T23849] 
[  587.764628][T23849] which lock already depends on the new lock.
[  587.764628][T23849] 
[  587.775038][T23849] 
[  587.775038][T23849] the existing dependency chain (in reverse order) is:
[  587.784062][T23849] 
[  587.784062][T23849] -> #7 (&mm->mmap_lock){++++}-{4:4}:
[  587.791742][T23849]        __might_fault+0xcb/0x130
[  587.796792][T23849]        _copy_from_user+0x28/0xb0
[  587.801928][T23849]        csum_and_copy_from_iter_full+0x210/0x1fb0
[  587.808542][T23849]        ip_generic_getfrag+0x149/0x2d0
[  587.814166][T23849]        __ip6_append_data+0x3b26/0x40c0
[  587.819909][T23849]        ip6_append_data+0x108/0x270
[  587.825225][T23849]        rawv6_sendmsg+0x1298/0x18c0
[  587.830609][T23849]        sock_sendmsg_nosec+0x10e/0x180
[  587.836235][T23849]        ____sys_sendmsg+0x54e/0x850
[  587.841547][T23849]        ___sys_sendmsg+0x2a5/0x360
[  587.846779][T23849]        __x64_sys_sendmsg+0x1b1/0x290
[  587.852272][T23849]        do_syscall_64+0x174/0x580
[  587.857410][T23849]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  587.863864][T23849] 
[  587.863864][T23849] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  587.871621][T23849]        lock_sock_nested+0x41/0x100
[  587.876949][T23849]        inet_shutdown+0x6a/0x390
[  587.882033][T23849]        nbd_mark_nsock_dead+0x2cb/0x550
[  587.887754][T23849]        recv_work+0x1cee/0x1e10
[  587.892702][T23849]        process_scheduled_works+0xa8e/0x14e0
[  587.898785][T23849]        worker_thread+0xa47/0xfb0
[  587.903900][T23849]        kthread+0x388/0x470
[  587.908506][T23849]        ret_from_fork+0x514/0xb70
[  587.913650][T23849]        ret_from_fork_asm+0x1a/0x30
[  587.918958][T23849] 
[  587.918958][T23849] -> #5 (&nsock->tx_lock){+.+.}-{4:4}:
[  587.926627][T23849]        __mutex_lock+0x19d/0x1550
[  587.931760][T23849]        nbd_queue_rq+0x373/0x1150
[  587.936878][T23849]        blk_mq_dispatch_rq_list+0x499/0x1990
[  587.943046][T23849]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  587.949957][T23849]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  587.956469][T23849]        blk_mq_run_work_fn+0x16c/0x300
[  587.962033][T23849]        process_scheduled_works+0xa8e/0x14e0
[  587.968126][T23849]        worker_thread+0xa47/0xfb0
[  587.973255][T23849]        kthread+0x388/0x470
[  587.977864][T23849]        ret_from_fork+0x514/0xb70
[  587.982992][T23849]        ret_from_fork_asm+0x1a/0x30
[  587.988299][T23849] 
[  587.988299][T23849] -> #4 (&cmd->lock){+.+.}-{4:4}:
[  587.995535][T23849]        __mutex_lock+0x19d/0x1550
[  588.000654][T23849]        nbd_queue_rq+0xc1/0x1150
[  588.005696][T23849]        blk_mq_dispatch_rq_list+0x499/0x1990
[  588.011811][T23849]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  588.018682][T23849]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  588.025201][T23849]        blk_mq_run_work_fn+0x16c/0x300
[  588.030752][T23849]        process_scheduled_works+0xa8e/0x14e0
[  588.036837][T23849]        worker_thread+0xa47/0xfb0
[  588.041957][T23849]        kthread+0x388/0x470
[  588.046569][T23849]        ret_from_fork+0x514/0xb70
[  588.051692][T23849]        ret_from_fork_asm+0x1a/0x30
[  588.056980][T23849] 
[  588.056980][T23849] -> #3 (set->srcu){.+.+}-{0:0}:
[  588.064121][T23849]        __synchronize_srcu+0xc9/0x2f0
[  588.069641][T23849]        elevator_switch+0x1e8/0x7b0
[  588.074993][T23849]        elevator_change+0x2fa/0x480
[  588.080282][T23849]        elevator_set_default+0x375/0x440
[  588.086004][T23849]        blk_register_queue+0x3f3/0x4e0
[  588.091579][T23849]        __add_disk+0x6cb/0xe30
[  588.096488][T23849]        add_disk_fwnode+0x100/0x3a0
[  588.101784][T23849]        nbd_dev_add+0x733/0xb60
[  588.106731][T23849]        nbd_init+0x15f/0x1e0
[  588.111482][T23849]        do_one_initcall+0x250/0x870
[  588.116801][T23849]        do_initcall_level+0x10a/0x1a0
[  588.122321][T23849]        do_initcalls+0x59/0xa0
[  588.127197][T23849]        kernel_init_freeable+0x29d/0x3e0
[  588.132952][T23849]        kernel_init+0x1d/0x1d0
[  588.137817][T23849]        ret_from_fork+0x514/0xb70
[  588.142947][T23849]        ret_from_fork_asm+0x1a/0x30
[  588.148266][T23849] 
[  588.148266][T23849] -> #2 (&q->elevator_lock){+.+.}-{4:4}:
[  588.156117][T23849]        __mutex_lock+0x19d/0x1550
[  588.161244][T23849]        elevator_change+0x1af/0x480
[  588.166575][T23849]        elevator_set_none+0xb5/0x140
[  588.171975][T23849]        blk_mq_update_nr_hw_queues+0x5ef/0x19f0
[  588.178319][T23849]        nbd_start_device+0x189/0xb30
[  588.183729][T23849]        nbd_genl_connect+0x1597/0x1c10
[  588.189298][T23849]        genl_family_rcv_msg_doit+0x233/0x340
[  588.195448][T23849]        genl_rcv_msg+0x614/0x7a0
[  588.200479][T23849]        netlink_rcv_skb+0x226/0x4a0
[  588.205771][T23849]        genl_rcv+0x28/0x40
[  588.210289][T23849]        netlink_unicast+0x7bb/0x940
[  588.215577][T23849]        netlink_sendmsg+0x813/0xb40
[  588.220874][T23849]        sock_sendmsg_nosec+0x13a/0x180
[  588.226461][T23849]        ____sys_sendmsg+0x54e/0x850
[  588.231747][T23849]        ___sys_sendmsg+0x2a5/0x360
[  588.236949][T23849]        __x64_sys_sendmsg+0x1b1/0x290
[  588.242413][T23849]        do_syscall_64+0x174/0x580
[  588.247551][T23849]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  588.253985][T23849] 
[  588.253985][T23849] -> #1 (&q->q_usage_counter(io)#50){++++}-{0:0}:
[  588.262613][T23849]        blk_alloc_queue+0x544/0x690
[  588.267933][T23849]        __blk_mq_alloc_disk+0x194/0x390
[  588.273586][T23849]        nbd_dev_add+0x494/0xb60
[  588.278529][T23849]        nbd_init+0x15f/0x1e0
[  588.283223][T23849]        do_one_initcall+0x250/0x870
[  588.288517][T23849]        do_initcall_level+0x10a/0x1a0
[  588.293991][T23849]        do_initcalls+0x59/0xa0
[  588.298850][T23849]        kernel_init_freeable+0x29d/0x3e0
[  588.304583][T23849]        kernel_init+0x1d/0x1d0
[  588.309440][T23849]        ret_from_fork+0x514/0xb70
[  588.314567][T23849]        ret_from_fork_asm+0x1a/0x30
[  588.319868][T23849] 
[  588.319868][T23849] -> #0 (fs_reclaim){+.+.}-{0:0}:
[  588.327100][T23849]        __lock_acquire+0x1520/0x2cf0
[  588.332521][T23849]        lock_acquire+0x106/0x350
[  588.337552][T23849]        fs_reclaim_acquire+0x71/0x100
[  588.343029][T23849]        prepare_alloc_pages+0x15b/0x650
[  588.348683][T23849]        __alloc_frozen_pages_noprof+0x12f/0x380
[  588.355021][T23849]        alloc_pages_mpol+0x212/0x380
[  588.360429][T23849]        alloc_pages_noprof+0xac/0x2a0
[  588.365892][T23849]        pte_alloc_one+0x22/0x370
[  588.370939][T23849]        do_pte_missing+0x13c8/0x34b0
[  588.376315][T23849]        handle_mm_fault+0x1b36/0x3080
[  588.381788][T23849]        do_user_addr_fault+0x744/0x1340
[  588.387446][T23849]        exc_page_fault+0x6a/0xc0
[  588.392486][T23849]        asm_exc_page_fault+0x26/0x30
[  588.397881][T23849]        rep_movs_alternative+0x30/0xa0
[  588.403451][T23849]        _copy_from_user+0x7a/0xb0
[  588.408566][T23849]        copy_from_sockptr+0x48/0x70
[  588.413920][T23849]        raw_setsockopt+0x5e7/0x1440
[  588.419225][T23849]        do_sock_setsockopt+0x17c/0x1b0
[  588.424775][T23849]        __x64_sys_setsockopt+0x13d/0x1b0
[  588.430499][T23849]        do_syscall_64+0x174/0x580
[  588.435636][T23849]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  588.442076][T23849] 
[  588.442076][T23849] other info that might help us debug this:
[  588.442076][T23849] 
[  588.452315][T23849] Chain exists of:
[  588.452315][T23849]   fs_reclaim --> sk_lock-AF_INET6 --> &mm->mmap_lock
[  588.452315][T23849] 
[  588.464967][T23849]  Possible unsafe locking scenario:
[  588.464967][T23849] 
[  588.472462][T23849]        CPU0                    CPU1
[  588.477861][T23849]        ----                    ----
[  588.483244][T23849]   rlock(&mm->mmap_lock);
[  588.487671][T23849]                                lock(sk_lock-AF_INET6);
[  588.494705][T23849]                                lock(&mm->mmap_lock);
[  588.501568][T23849]   lock(fs_reclaim);
[  588.505566][T23849] 
[  588.505566][T23849]  *** DEADLOCK ***
[  588.505566][T23849] 
[  588.513747][T23849] 3 locks held by syz.4.4756/23849:
[  588.518968][T23849]  #0: ffffffff9002dac0 (rtnl_mutex){+.+.}-{4:4}, at: raw_setsockopt+0xcb/0x1440
[  588.528160][T23849]  #1: ffff888056558260 (sk_lock-AF_CAN){+.+.}-{0:0}, at: raw_setsockopt+0xda/0x1440
[  588.537675][T23849]  #2: ffff8880263d03b8 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340
[  588.547622][T23849] 
[  588.547622][T23849] stack backtrace:
[  588.553525][T23849] CPU: 0 UID: 0 PID: 23849 Comm: syz.4.4756 Not tainted syzkaller #0 PREEMPT(full) 
[  588.553543][T23849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  588.553552][T23849] Call Trace:
[  588.553558][T23849]  <TASK>
[  588.553564][T23849]  dump_stack_lvl+0xe8/0x150
[  588.553587][T23849]  print_circular_bug+0x2e1/0x300
[  588.553605][T23849]  check_noncircular+0x12e/0x150
[  588.553622][T23849]  __lock_acquire+0x1520/0x2cf0
[  588.553645][T23849]  ? mas_find+0xab1/0xcf0
[  588.553732][T23849]  ? __css_rstat_updated+0x235/0x540
[  588.553764][T23849]  ? __lock_acquire+0x683/0x2cf0
[  588.553786][T23849]  ? prepare_alloc_pages+0x15b/0x650
[  588.553806][T23849]  lock_acquire+0x106/0x350
[  588.553825][T23849]  ? prepare_alloc_pages+0x15b/0x650
[  588.553869][T23849]  fs_reclaim_acquire+0x71/0x100
[  588.553888][T23849]  ? prepare_alloc_pages+0x15b/0x650
[  588.553909][T23849]  prepare_alloc_pages+0x15b/0x650
[  588.553933][T23849]  __alloc_frozen_pages_noprof+0x12f/0x380
[  588.553958][T23849]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  588.553983][T23849]  ? __pfx_policy_nodemask+0x10/0x10
[  588.554011][T23849]  alloc_pages_mpol+0x212/0x380
[  588.554037][T23849]  alloc_pages_noprof+0xac/0x2a0
[  588.554051][T23849]  pte_alloc_one+0x22/0x370
[  588.554069][T23849]  do_pte_missing+0x13c8/0x34b0
[  588.554092][T23849]  ? __pfx___thp_vma_allowable_orders+0x10/0x10
[  588.554118][T23849]  handle_mm_fault+0x1b36/0x3080
[  588.554156][T23849]  ? handle_mm_fault+0xec/0x3080
[  588.554175][T23849]  ? __pfx_handle_mm_fault+0x10/0x10
[  588.554196][T23849]  ? __lock_acquire+0x683/0x2cf0
[  588.554218][T23849]  ? lock_mm_and_find_vma+0xa7/0x340
[  588.554238][T23849]  do_user_addr_fault+0x744/0x1340
[  588.554266][T23849]  exc_page_fault+0x6a/0xc0
[  588.554284][T23849]  asm_exc_page_fault+0x26/0x30
[  588.554298][T23849] RIP: 0010:rep_movs_alternative+0x30/0xa0
[  588.554322][T23849] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 4d 63 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08
[  588.554335][T23849] RSP: 0018:ffffc9000447fcf0 EFLAGS: 00050246
[  588.554347][T23849] RAX: 00007ffffffff001 RBX: 0000000000000008 RCX: 0000000000000008
[  588.554357][T23849] RDX: 0000000000000001 RSI: 00002000000002c0 RDI: ffffc9000447fdc0
[  588.554367][T23849] RBP: 0000000000000000 R08: ffffc9000447fdc7 R09: 1ffff9200088ffb8
[  588.554377][T23849] R10: dffffc0000000000 R11: fffff5200088ffb9 R12: 0000000000000000
[  588.554387][T23849] R13: dffffc0000000000 R14: ffffc9000447fdc0 R15: 00002000000002c0
[  588.554404][T23849]  _copy_from_user+0x7a/0xb0
[  588.554419][T23849]  copy_from_sockptr+0x48/0x70
[  588.554433][T23849]  raw_setsockopt+0x5e7/0x1440
[  588.554446][T23849]  ? __fget_files+0x2a/0x420
[  588.554469][T23849]  ? __pfx_aa_sk_perm+0x10/0x10
[  588.554527][T23849]  ? __pfx_raw_setsockopt+0x10/0x10
[  588.554540][T23849]  ? __fget_files+0x2a/0x420
[  588.554559][T23849]  ? aa_sock_opt_perm+0xff/0x1a0
[  588.554593][T23849]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  588.554621][T23849]  ? __pfx_raw_setsockopt+0x10/0x10
[  588.554634][T23849]  do_sock_setsockopt+0x17c/0x1b0
[  588.554654][T23849]  __x64_sys_setsockopt+0x13d/0x1b0
[  588.554670][T23849]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  588.554685][T23849]  do_syscall_64+0x174/0x580
[  588.554702][T23849]  ? trace_irq_disable+0x3b/0x140
[  588.554721][T23849]  ? clear_bhb_loop+0x40/0x90
[  588.554738][T23849]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  588.554752][T23849] RIP: 0033:0x7ff7fad9e019
[  588.554765][T23849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  588.554777][T23849] RSP: 002b:00007ff7fbb8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  588.554791][T23849] RAX: ffffffffffffffda RBX: 00007ff7fb025fa0 RCX: 00007ff7fad9e019
[  588.554801][T23849] RDX: 0000000000000001 RSI: 0000000000000065 RDI: 0000000000000004
[  588.554810][T23849] RBP: 00007ff7fae3500c R08: 0000000000000008 R09: 0000000000000000
[  588.554818][T23849] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000000
[  588.554828][T23849] R13: 00007ff7fb026038 R14: 00007ff7fb025fa0 R15: 00007ffde36e50b8
[  588.554845][T23849]  </TASK>
[  588.996722][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  589.077298][T16620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  589.085995][T16618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  589.142769][T23835] SET target dimension over the limit!
[  589.177759][T23858] syzkaller0: entered promiscuous mode
[  589.184338][T23858] syzkaller0: entered allmulticast mode
[  589.191981][T23858] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487
[  589.512237][ T1020] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  589.521057][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  592.151741][T16618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  592.711685][ T1127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  595.193122][T16618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  595.279416][ T6638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  595.288320][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog